# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Mar 3 2020 14:14:30 # Log Creation Date: 27.04.2020 07:41:22.544 Process: id = "1" image_name = "ctfmon.exe" filename = "c:\\users\\fd1hvy\\desktop\\ctfmon.exe" page_root = "0x696ff000" os_pid = "0x1180" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x560" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x117c [0063.251] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0063.954] RoInitialize () returned 0x1 [0063.955] RoUninitialize () returned 0x0 [0069.240] CoTaskMemAlloc (cb=0x20c) returned 0xfb48c8 [0069.240] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0xfb48c8 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x0 [0069.249] CoTaskMemFree (pv=0xfb48c8) [0069.258] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3cf20 | out: phkResult=0xb3cf20*=0x0) returned 0x2 [0069.258] RegCloseKey (hKey=0x80000002) returned 0x0 [0069.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0xb3d178, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0070.278] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x384 [0070.308] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x370 [0070.329] SetEvent (hEvent=0x370) returned 1 [0070.331] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0xb3d6a4*=0x384, lpdwindex=0xb3d4c4 | out: lpdwindex=0xb3d4c4) returned 0x0 [0072.254] CoGetContextToken (in: pToken=0xb3d570 | out: pToken=0xb3d570) returned 0x0 [0072.287] CoGetContextToken (in: pToken=0xb3d4d0 | out: pToken=0xb3d4d0) returned 0x0 [0072.308] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbf950, riid=0xb3d5a0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0xb3d59c | out: ppvObject=0xb3d59c*=0xfbf950) returned 0x0 [0072.309] WbemDefPath:IUnknown:AddRef (This=0xfbf950) returned 0x3 [0072.309] WbemDefPath:IUnknown:Release (This=0xfbf950) returned 0x2 [0072.318] WbemDefPath:IWbemPath:SetText (This=0xfbf950, uMode=0x4, pszPath="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0072.323] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbf950, puCount=0xb3d718 | out: puCount=0xb3d718*=0x0) returned 0x0 [0072.323] WbemDefPath:IWbemPath:GetText (in: This=0xfbf950, lFlags=2, puBuffLength=0xb3d714*=0x0, pszText=0x0 | out: puBuffLength=0xb3d714*=0x20, pszText=0x0) returned 0x0 [0072.324] WbemDefPath:IWbemPath:GetText (in: This=0xfbf950, lFlags=2, puBuffLength=0xb3d714*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0xb3d714*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0072.324] WbemDefPath:IWbemPath:GetInfo (in: This=0xfbf950, uRequestedInfo=0x0, puResponse=0xb3d720 | out: puResponse=0xb3d720*=0xc19) returned 0x0 [0072.325] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbf950, puCount=0xb3d718 | out: puCount=0xb3d718*=0x0) returned 0x0 [0072.325] WbemDefPath:IWbemPath:GetInfo (in: This=0xfbf950, uRequestedInfo=0x0, puResponse=0xb3d720 | out: puResponse=0xb3d720*=0xc19) returned 0x0 [0072.325] WbemDefPath:IWbemPath:GetInfo (in: This=0xfbf950, uRequestedInfo=0x0, puResponse=0xb3d720 | out: puResponse=0xb3d720*=0xc19) returned 0x0 [0072.333] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbf950, puCount=0xb3d6ac | out: puCount=0xb3d6ac*=0x0) returned 0x0 [0072.335] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x40c [0072.335] SetEvent (hEvent=0x370) returned 1 [0072.335] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0xb3cf04*=0x40c, lpdwindex=0xb3cd24 | out: lpdwindex=0xb3cd24) returned 0x0 [0072.338] CoGetContextToken (in: pToken=0xb3cdd0 | out: pToken=0xb3cdd0) returned 0x0 [0072.338] CoGetContextToken (in: pToken=0xb3cd30 | out: pToken=0xb3cd30) returned 0x0 [0072.338] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfc60, riid=0xb3ce00*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0xb3cdfc | out: ppvObject=0xb3cdfc*=0xfbfc60) returned 0x0 [0072.338] WbemDefPath:IUnknown:AddRef (This=0xfbfc60) returned 0x3 [0072.338] WbemDefPath:IUnknown:Release (This=0xfbfc60) returned 0x2 [0072.338] WbemDefPath:IWbemPath:SetText (This=0xfbfc60, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0072.339] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbfc60, puCount=0xb3d698 | out: puCount=0xb3d698*=0x2) returned 0x0 [0072.339] WbemDefPath:IWbemPath:GetText (in: This=0xfbfc60, lFlags=4, puBuffLength=0xb3d694*=0x0, pszText=0x0 | out: puBuffLength=0xb3d694*=0xf, pszText=0x0) returned 0x0 [0072.339] WbemDefPath:IWbemPath:GetText (in: This=0xfbfc60, lFlags=4, puBuffLength=0xb3d694*=0xf, pszText="00000000000000" | out: puBuffLength=0xb3d694*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0072.339] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x410 [0072.339] SetEvent (hEvent=0x370) returned 1 [0072.339] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0xb3d5f4*=0x410, lpdwindex=0xb3d414 | out: lpdwindex=0xb3d414) returned 0x0 [0072.341] CoGetContextToken (in: pToken=0xb3d4c0 | out: pToken=0xb3d4c0) returned 0x0 [0072.341] CoGetContextToken (in: pToken=0xb3d420 | out: pToken=0xb3d420) returned 0x0 [0072.341] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfaa0, riid=0xb3d4f0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0xb3d4ec | out: ppvObject=0xb3d4ec*=0xfbfaa0) returned 0x0 [0072.341] WbemDefPath:IUnknown:AddRef (This=0xfbfaa0) returned 0x3 [0072.341] WbemDefPath:IUnknown:Release (This=0xfbfaa0) returned 0x2 [0072.341] WbemDefPath:IWbemPath:SetText (This=0xfbfaa0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0072.341] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbfaa0, puCount=0xb3d670 | out: puCount=0xb3d670*=0x2) returned 0x0 [0072.341] WbemDefPath:IWbemPath:GetText (in: This=0xfbfaa0, lFlags=4, puBuffLength=0xb3d66c*=0x0, pszText=0x0 | out: puBuffLength=0xb3d66c*=0xf, pszText=0x0) returned 0x0 [0072.342] WbemDefPath:IWbemPath:GetText (in: This=0xfbfaa0, lFlags=4, puBuffLength=0xb3d66c*=0xf, pszText="00000000000000" | out: puBuffLength=0xb3d66c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0072.370] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0xb3d590*=0x424, lpdwindex=0xb3d444 | out: lpdwindex=0xb3d444) returned 0x0 [0092.495] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbf950, puCount=0xb3d71c | out: puCount=0xb3d71c*=0x0) returned 0x0 [0092.495] WbemDefPath:IWbemPath:GetText (in: This=0xfbf950, lFlags=2, puBuffLength=0xb3d718*=0x0, pszText=0x0 | out: puBuffLength=0xb3d718*=0x20, pszText=0x0) returned 0x0 [0092.495] WbemDefPath:IWbemPath:GetText (in: This=0xfbf950, lFlags=2, puBuffLength=0xb3d718*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0xb3d718*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0092.496] WbemDefPath:IWbemPath:GetText (in: This=0xfbf950, lFlags=2, puBuffLength=0xb3d720*=0x0, pszText=0x0 | out: puBuffLength=0xb3d720*=0x20, pszText=0x0) returned 0x0 [0092.496] WbemDefPath:IWbemPath:GetText (in: This=0xfbf950, lFlags=2, puBuffLength=0xb3d720*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0xb3d720*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0092.510] CoGetContextToken (in: pToken=0xb3d4a4 | out: pToken=0xb3d4a4) returned 0x0 [0092.510] CoGetContextToken (in: pToken=0xb3d408 | out: pToken=0xb3d408) returned 0x0 [0092.510] CoGetContextToken (in: pToken=0xb3d408 | out: pToken=0xb3d408) returned 0x0 [0092.510] CoGetContextToken (in: pToken=0xb3d3b0 | out: pToken=0xb3d3b0) returned 0x0 [0092.511] IUnknown:QueryInterface (in: This=0xf70108, riid=0x73bef070*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3d38c | out: ppvObject=0xb3d38c*=0xf70118) returned 0x0 [0092.511] CObjectContext::ContextCallback () returned 0x0 [0092.669] IUnknown:Release (This=0xf70118) returned 0x1 [0092.670] CoUnmarshalInterface (in: pStm=0xfc5860, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xb3d3fc | out: ppv=0xb3d3fc*=0xf87dd4) returned 0x0 [0092.670] CoMarshalInterface (pStm=0xfc5860, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0xf87dd4, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0092.670] WbemLocator:IUnknown:QueryInterface (in: This=0xf87dd4, riid=0xb3d4d4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0xb3d4d0 | out: ppvObject=0xb3d4d0*=0xf77f90) returned 0x0 [0092.674] WbemLocator:IUnknown:Release (This=0xf87dd4) returned 0x1 [0092.675] IWbemServices:GetObject (in: This=0xf77f90, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0xb3d6d4*=0x0, ppCallResult=0x0 | out: ppObject=0xb3d6d4*=0xfe2968, ppCallResult=0x0) returned 0x0 [0095.901] WbemLocator:IUnknown:Release (This=0xf77f90) returned 0x0 [0095.924] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbfaa0, puCount=0xb3d6d4 | out: puCount=0xb3d6d4*=0x2) returned 0x0 [0095.924] WbemDefPath:IWbemPath:GetText (in: This=0xfbfaa0, lFlags=4, puBuffLength=0xb3d6d0*=0x0, pszText=0x0 | out: puBuffLength=0xb3d6d0*=0xf, pszText=0x0) returned 0x0 [0095.924] WbemDefPath:IWbemPath:GetText (in: This=0xfbfaa0, lFlags=4, puBuffLength=0xb3d6d0*=0xf, pszText="00000000000000" | out: puBuffLength=0xb3d6d0*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0095.926] IWbemClassObject:Get (in: This=0xfe2968, wszName="VolumeSerialNumber", lFlags=0, pVal=0xb3d6d0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a07518*=0, plFlavor=0x2a0751c*=0 | out: pVal=0xb3d6d0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="B4197730", varVal2=0x0), pType=0x2a07518*=8, plFlavor=0x2a0751c*=0) returned 0x0 [0095.927] SysStringByteLen (bstr="B4197730") returned 0x10 [0095.928] SysStringByteLen (bstr="B4197730") returned 0x10 [0095.928] IWbemClassObject:Get (in: This=0xfe2968, wszName="VolumeSerialNumber", lFlags=0, pVal=0xb3d6d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a07518*=8, plFlavor=0x2a0751c*=0 | out: pVal=0xb3d6d8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="B4197730", varVal2=0x0), pType=0x2a07518*=8, plFlavor=0x2a0751c*=0) returned 0x0 [0095.928] SysStringByteLen (bstr="B4197730") returned 0x10 [0095.928] SysStringByteLen (bstr="B4197730") returned 0x10 [0096.392] BCryptGetFipsAlgorithmMode (in: pfEnabled=0xb3d73c | out: pfEnabled=0xb3d73c) returned 0x0 [0097.075] GetComputerNameW (in: lpBuffer=0xb3d514, nSize=0xb3d78c | out: lpBuffer="NQDPDE", nSize=0xb3d78c) returned 1 [0097.138] GetUserNameW (in: lpBuffer=0xb3d514, pcbBuffer=0xb3d78c | out: lpBuffer="FD1HVy", pcbBuffer=0xb3d78c) returned 1 [0097.289] GetLocaleInfoA (in: Locale=0x400, LCType=0x1002, lpLCData=0xb3d618, cchData=256 | out: lpLCData="United States") returned 14 [0097.297] GetTimeZoneInformation (in: lpTimeZoneInformation=0xb3d590 | out: lpTimeZoneInformation=0xb3d590) returned 0x2 [0097.299] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0xb3d3ec | out: pTimeZoneInformation=0xb3d3ec) returned 0x2 [0097.303] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3d4d0 | out: phkResult=0xb3d4d0*=0x47c) returned 0x0 [0097.304] RegQueryValueExW (in: hKey=0x47c, lpValueName="TZI", lpReserved=0x0, lpType=0xb3d4ec, lpData=0x0, lpcbData=0xb3d4e8*=0x0 | out: lpType=0xb3d4ec*=0x3, lpData=0x0, lpcbData=0xb3d4e8*=0x2c) returned 0x0 [0097.304] RegQueryValueExW (in: hKey=0x47c, lpValueName="TZI", lpReserved=0x0, lpType=0xb3d4ec, lpData=0x2a1afd8, lpcbData=0xb3d4e8*=0x2c | out: lpType=0xb3d4ec*=0x3, lpData=0x2a1afd8*, lpcbData=0xb3d4e8*=0x2c) returned 0x0 [0097.304] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3d324 | out: phkResult=0xb3d324*=0x0) returned 0x2 [0097.305] RegQueryValueExW (in: hKey=0x47c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0xb3d4c4, lpData=0x0, lpcbData=0xb3d4c0*=0x0 | out: lpType=0xb3d4c4*=0x1, lpData=0x0, lpcbData=0xb3d4c0*=0x20) returned 0x0 [0097.305] RegQueryValueExW (in: hKey=0x47c, lpValueName="MUI_Display", lpReserved=0x0, lpType=0xb3d4c4, lpData=0x2a1b578, lpcbData=0xb3d4c0*=0x20 | out: lpType=0xb3d4c4*=0x1, lpData="@tzres.dll,-320", lpcbData=0xb3d4c0*=0x20) returned 0x0 [0097.305] RegQueryValueExW (in: hKey=0x47c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0xb3d4c4, lpData=0x0, lpcbData=0xb3d4c0*=0x0 | out: lpType=0xb3d4c4*=0x1, lpData=0x0, lpcbData=0xb3d4c0*=0x20) returned 0x0 [0097.305] RegQueryValueExW (in: hKey=0x47c, lpValueName="MUI_Std", lpReserved=0x0, lpType=0xb3d4c4, lpData=0x2a1b5d0, lpcbData=0xb3d4c0*=0x20 | out: lpType=0xb3d4c4*=0x1, lpData="@tzres.dll,-322", lpcbData=0xb3d4c0*=0x20) returned 0x0 [0097.305] RegQueryValueExW (in: hKey=0x47c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0xb3d4c4, lpData=0x0, lpcbData=0xb3d4c0*=0x0 | out: lpType=0xb3d4c4*=0x1, lpData=0x0, lpcbData=0xb3d4c0*=0x20) returned 0x0 [0097.305] RegQueryValueExW (in: hKey=0x47c, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0xb3d4c4, lpData=0x2a1b628, lpcbData=0xb3d4c0*=0x20 | out: lpType=0xb3d4c4*=0x1, lpData="@tzres.dll,-321", lpcbData=0xb3d4c0*=0x20) returned 0x0 [0097.307] CoTaskMemAlloc (cb=0x20c) returned 0xfeeaa0 [0097.307] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xfeeaa0 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0097.309] CoTaskMemFree (pv=0xfeeaa0) [0097.309] CoTaskMemAlloc (cb=0x20c) returned 0xff17e8 [0097.309] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xb3d4e0, pwszFileMUIPath=0xff17e8, pcchFileMUIPath=0xb3d4e4, pululEnumerator=0xb3d4d8 | out: pwszLanguage=0x0, pcchLanguage=0xb3d4e0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xb3d4e4, pululEnumerator=0xb3d4d8) returned 1 [0097.315] CoTaskMemFree (pv=0x0) [0097.315] CoTaskMemFree (pv=0xff17e8) [0097.316] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2960001 [0097.321] CoTaskMemAlloc (cb=0x3ec) returned 0xfe9ea8 [0097.321] LoadStringW (in: hInstance=0x2960001, uID=0x140, lpBuffer=0xfe9ea8, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c [0097.322] CoTaskMemFree (pv=0xfe9ea8) [0097.322] FreeLibrary (hLibModule=0x2960001) returned 1 [0097.323] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0097.323] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xff1c38 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0097.323] CoTaskMemFree (pv=0xff1c38) [0097.323] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0097.323] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xb3d4e0, pwszFileMUIPath=0xff0af8, pcchFileMUIPath=0xb3d4e4, pululEnumerator=0xb3d4d8 | out: pwszLanguage=0x0, pcchLanguage=0xb3d4e0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xb3d4e4, pululEnumerator=0xb3d4d8) returned 1 [0097.324] CoTaskMemFree (pv=0x0) [0097.324] CoTaskMemFree (pv=0xff0af8) [0097.324] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2960001 [0097.325] CoTaskMemAlloc (cb=0x3ec) returned 0xfe9ea8 [0097.325] LoadStringW (in: hInstance=0x2960001, uID=0x142, lpBuffer=0xfe9ea8, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17 [0097.325] CoTaskMemFree (pv=0xfe9ea8) [0097.325] FreeLibrary (hLibModule=0x2960001) returned 1 [0097.326] CoTaskMemAlloc (cb=0x20c) returned 0xff0480 [0097.326] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0xff0480 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0097.326] CoTaskMemFree (pv=0xff0480) [0097.326] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0097.326] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xb3d4e0, pwszFileMUIPath=0xfeeef0, pcchFileMUIPath=0xb3d4e4, pululEnumerator=0xb3d4d8 | out: pwszLanguage=0x0, pcchLanguage=0xb3d4e0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xb3d4e4, pululEnumerator=0xb3d4d8) returned 1 [0097.327] CoTaskMemFree (pv=0x0) [0097.327] CoTaskMemFree (pv=0xfeeef0) [0097.327] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2960001 [0097.328] CoTaskMemAlloc (cb=0x3ec) returned 0xfe9ea8 [0097.328] LoadStringW (in: hInstance=0x2960001, uID=0x141, lpBuffer=0xfe9ea8, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17 [0097.328] CoTaskMemFree (pv=0xfe9ea8) [0097.328] FreeLibrary (hLibModule=0x2960001) returned 1 [0097.329] RegCloseKey (hKey=0x47c) returned 0x0 [0097.997] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x772d0000 [0098.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="IsDebuggerPresent", cchWideChar=17, lpMultiByteStr=0xb3f298, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IsDebuggerPresent·Ò", lpUsedDefaultChar=0x0) returned 17 [0098.079] GetProcAddress (hModule=0x772d0000, lpProcName="IsDebuggerPresent") returned 0x772e5930 [0098.094] IsDebuggerPresent () returned 0 [0098.170] GetCurrentProcessId () returned 0x1180 [0098.182] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x1180) returned 0x47c [0098.207] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CheckRemoteDebuggerPresent", cchWideChar=26, lpMultiByteStr=0xb3f290, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CheckRemoteDebuggerPresentÒ", lpUsedDefaultChar=0x0) returned 26 [0098.208] GetProcAddress (hModule=0x772d0000, lpProcName="CheckRemoteDebuggerPresent") returned 0x772e42f0 [0098.318] CheckRemoteDebuggerPresent (in: hProcess=0x47c, pbDebuggerPresent=0xb3f31c | out: pbDebuggerPresent=0xb3f31c) returned 1 [0098.331] CloseHandle (hObject=0x47c) returned 1 [0098.331] CloseHandle (hObject=0x12345678) returned 0 [0098.332] LoadLibraryW (lpLibFileName="user32.dll") returned 0x750c0000 [0098.391] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EnumWindows", cchWideChar=11, lpMultiByteStr=0xb3f29c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EnumWindowss³¾Ò", lpUsedDefaultChar=0x0) returned 11 [0098.391] GetProcAddress (hModule=0x750c0000, lpProcName="EnumWindows") returned 0x750da3c0 [0098.412] EnumWindows (lpEnumFunc=0x4fa0756, lParam=0x0) returned 1 [0098.521] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.521] GetClassNameW (in: hWnd=0x10158, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0098.522] CoTaskMemFree (pv=0xfee878) [0098.713] CoTaskMemAlloc (cb=0x20c) returned 0xfef9b8 [0098.713] GetClassNameW (in: hWnd=0x10124, lpClassName=0xfef9b8, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0098.713] CoTaskMemFree (pv=0xfef9b8) [0098.713] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.713] GetClassNameW (in: hWnd=0x100cc, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.713] CoTaskMemFree (pv=0xfef340) [0098.714] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.714] GetClassNameW (in: hWnd=0x100c8, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.714] CoTaskMemFree (pv=0xff0030) [0098.714] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.714] GetClassNameW (in: hWnd=0x100c4, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.714] CoTaskMemFree (pv=0xfef340) [0098.714] CoTaskMemAlloc (cb=0x20c) returned 0xfefbe0 [0098.714] GetClassNameW (in: hWnd=0x100c0, lpClassName=0xfefbe0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.714] CoTaskMemFree (pv=0xfefbe0) [0098.714] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.714] GetClassNameW (in: hWnd=0x100ac, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.715] CoTaskMemFree (pv=0xff1c38) [0098.715] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.715] GetClassNameW (in: hWnd=0x100a4, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.715] CoTaskMemFree (pv=0xfeeef0) [0098.715] CoTaskMemAlloc (cb=0x20c) returned 0xff0480 [0098.715] GetClassNameW (in: hWnd=0x10098, lpClassName=0xff0480, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.715] CoTaskMemFree (pv=0xff0480) [0098.715] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.715] GetClassNameW (in: hWnd=0x100dc, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.715] CoTaskMemFree (pv=0xfee878) [0098.716] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.716] GetClassNameW (in: hWnd=0x100d0, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.716] CoTaskMemFree (pv=0xff0030) [0098.716] CoTaskMemAlloc (cb=0x20c) returned 0xff17e8 [0098.716] GetClassNameW (in: hWnd=0x100d4, lpClassName=0xff17e8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.716] CoTaskMemFree (pv=0xff17e8) [0098.716] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.716] GetClassNameW (in: hWnd=0x10090, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0098.716] CoTaskMemFree (pv=0xff22b0) [0098.717] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.717] GetClassNameW (in: hWnd=0x101d8, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="ATL:00007FFCCD0F7230") returned 20 [0098.717] CoTaskMemFree (pv=0xfef340) [0098.717] CoTaskMemAlloc (cb=0x20c) returned 0xff0d20 [0098.717] GetClassNameW (in: hWnd=0x10100, lpClassName=0xff0d20, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.717] CoTaskMemFree (pv=0xff0d20) [0098.717] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.717] GetClassNameW (in: hWnd=0x100de, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0098.717] CoTaskMemFree (pv=0xfef340) [0098.718] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.718] GetClassNameW (in: hWnd=0x202ba, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="Steve_cls") returned 9 [0098.718] CoTaskMemFree (pv=0xfeeef0) [0098.718] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.718] GetClassNameW (in: hWnd=0x502ac, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0098.718] CoTaskMemFree (pv=0xff0f48) [0098.718] CoTaskMemAlloc (cb=0x20c) returned 0xff08d0 [0098.718] GetClassNameW (in: hWnd=0x102b6, lpClassName=0xff08d0, nMaxCount=260 | out: lpClassName="mario_class") returned 11 [0098.718] CoTaskMemFree (pv=0xff08d0) [0098.719] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.719] GetClassNameW (in: hWnd=0x102b0, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="appointedsupervisorimpressedwindow") returned 34 [0098.719] CoTaskMemFree (pv=0xfeeef0) [0098.719] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.719] GetClassNameW (in: hWnd=0x202aa, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="Soldierscls") returned 11 [0098.719] CoTaskMemFree (pv=0xff0030) [0098.719] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.719] GetClassNameW (in: hWnd=0x102a6, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="utg2app") returned 7 [0098.719] CoTaskMemFree (pv=0xff1c38) [0098.719] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.720] GetClassNameW (in: hWnd=0x102a2, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="spgagentservicewnd") returned 18 [0098.720] CoTaskMemFree (pv=0xff0030) [0098.720] CoTaskMemAlloc (cb=0x20c) returned 0xff15c0 [0098.720] GetClassNameW (in: hWnd=0x1029e, lpClassName=0xff15c0, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0098.720] CoTaskMemFree (pv=0xff15c0) [0098.720] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.720] GetClassNameW (in: hWnd=0x20298, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0098.720] CoTaskMemFree (pv=0xff0af8) [0098.721] CoTaskMemAlloc (cb=0x20c) returned 0xff0480 [0098.721] GetClassNameW (in: hWnd=0x20294, lpClassName=0xff0480, nMaxCount=260 | out: lpClassName="mxslipstream_cls") returned 16 [0098.721] CoTaskMemFree (pv=0xff0480) [0098.721] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.721] GetClassNameW (in: hWnd=0x20290, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="isspos_wnd") returned 10 [0098.721] CoTaskMemFree (pv=0xfef790) [0098.721] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.721] GetClassNameW (in: hWnd=0x1028e, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="fpos_") returned 5 [0098.721] CoTaskMemFree (pv=0xff22b0) [0098.722] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.722] GetClassNameW (in: hWnd=0x1028a, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="edcsvr_win") returned 10 [0098.722] CoTaskMemFree (pv=0xff0af8) [0098.722] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.722] GetClassNameW (in: hWnd=0x10286, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="creditservice_") returned 14 [0098.722] CoTaskMemFree (pv=0xff0af8) [0098.722] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.722] GetClassNameW (in: hWnd=0x10282, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="centralcreditcardwnd") returned 20 [0098.722] CoTaskMemFree (pv=0xff0030) [0098.723] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.723] GetClassNameW (in: hWnd=0x2027c, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="ccv_server_wnd") returned 14 [0098.723] CoTaskMemFree (pv=0xff0af8) [0098.723] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.723] GetClassNameW (in: hWnd=0x1027a, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="aldelowindow") returned 12 [0098.723] CoTaskMemFree (pv=0xff0030) [0098.723] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.723] GetClassNameW (in: hWnd=0x10276, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="afr38_wnd") returned 9 [0098.723] CoTaskMemFree (pv=0xff0f48) [0098.724] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.724] GetClassNameW (in: hWnd=0x20272, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="accupos_app") returned 11 [0098.724] CoTaskMemFree (pv=0xfef790) [0098.724] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.724] GetClassNameW (in: hWnd=0x2026c, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="active-charge_win") returned 17 [0098.724] CoTaskMemFree (pv=0xfeeef0) [0098.724] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.724] GetClassNameW (in: hWnd=0x20268, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="yahoomessengerwnd") returned 17 [0098.724] CoTaskMemFree (pv=0xfeeef0) [0098.725] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.725] GetClassNameW (in: hWnd=0x20266, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="winscpwnd") returned 9 [0098.725] CoTaskMemFree (pv=0xff1c38) [0098.725] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.725] GetClassNameW (in: hWnd=0x20262, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="whatsapp_app") returned 12 [0098.725] CoTaskMemFree (pv=0xff0030) [0098.725] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.725] GetClassNameW (in: hWnd=0x10260, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="webdrive_window") returned 15 [0098.726] CoTaskMemFree (pv=0xff0f48) [0098.726] CoTaskMemAlloc (cb=0x20c) returned 0xff1e60 [0098.726] GetClassNameW (in: hWnd=0x1025c, lpClassName=0xff1e60, nMaxCount=260 | out: lpClassName="trilliancls") returned 11 [0098.726] CoTaskMemFree (pv=0xff1e60) [0098.726] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.726] GetClassNameW (in: hWnd=0x10258, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="totalcmd_app") returned 12 [0098.726] CoTaskMemFree (pv=0xfef340) [0098.726] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.726] GetClassNameW (in: hWnd=0x20252, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="thunderbirdapp") returned 14 [0098.726] CoTaskMemFree (pv=0xfef790) [0098.727] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.727] GetClassNameW (in: hWnd=0x10250, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="smartftp_window") returned 15 [0098.727] CoTaskMemFree (pv=0xff0030) [0098.727] CoTaskMemAlloc (cb=0x20c) returned 0xff08d0 [0098.727] GetClassNameW (in: hWnd=0x2024c, lpClassName=0xff08d0, nMaxCount=260 | out: lpClassName="skypewnd") returned 8 [0098.727] CoTaskMemFree (pv=0xff08d0) [0098.728] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.728] GetClassNameW (in: hWnd=0x10248, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="scriptftp_class") returned 15 [0098.728] CoTaskMemFree (pv=0xfef340) [0098.728] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.728] GetClassNameW (in: hWnd=0x10244, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0098.728] CoTaskMemFree (pv=0xff22b0) [0098.729] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.729] GetClassNameW (in: hWnd=0x10240, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="outlookcls") returned 10 [0098.729] CoTaskMemFree (pv=0xfee878) [0098.729] CoTaskMemAlloc (cb=0x20c) returned 0xff0d20 [0098.729] GetClassNameW (in: hWnd=0x2023a, lpClassName=0xff0d20, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0098.729] CoTaskMemFree (pv=0xff0d20) [0098.729] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.729] GetClassNameW (in: hWnd=0x20236, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="notepadclass") returned 12 [0098.729] CoTaskMemFree (pv=0xfeeef0) [0098.730] CoTaskMemAlloc (cb=0x20c) returned 0xff06a8 [0098.730] GetClassNameW (in: hWnd=0x20232, lpClassName=0xff06a8, nMaxCount=260 | out: lpClassName="ncftpwnd") returned 8 [0098.730] CoTaskMemFree (pv=0xff06a8) [0098.730] CoTaskMemAlloc (cb=0x20c) returned 0xff0d20 [0098.730] GetClassNameW (in: hWnd=0x2022e, lpClassName=0xff0d20, nMaxCount=260 | out: lpClassName="leechftp_window") returned 15 [0098.730] CoTaskMemFree (pv=0xff0d20) [0098.730] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.730] GetClassNameW (in: hWnd=0x2022a, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="icq_cls") returned 7 [0098.730] CoTaskMemFree (pv=0xff22b0) [0098.731] CoTaskMemAlloc (cb=0x20c) returned 0xff08d0 [0098.731] GetClassNameW (in: hWnd=0x10228, lpClassName=0xff08d0, nMaxCount=260 | out: lpClassName="gmailnotifierprocls") returned 19 [0098.731] CoTaskMemFree (pv=0xff08d0) [0098.731] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.731] GetClassNameW (in: hWnd=0x20222, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="foxmailincmailclass") returned 19 [0098.731] CoTaskMemFree (pv=0xff0030) [0098.731] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.731] GetClassNameW (in: hWnd=0x10220, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="fling_wnd") returned 9 [0098.731] CoTaskMemFree (pv=0xff1c38) [0098.731] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.731] GetClassNameW (in: hWnd=0x2021a, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="flashfxp_wnd") returned 12 [0098.732] CoTaskMemFree (pv=0xfef340) [0098.732] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.732] GetClassNameW (in: hWnd=0x10218, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="filezillawin") returned 12 [0098.732] CoTaskMemFree (pv=0xff0af8) [0098.732] CoTaskMemAlloc (cb=0x20c) returned 0xff0480 [0098.732] GetClassNameW (in: hWnd=0x20214, lpClassName=0xff0480, nMaxCount=260 | out: lpClassName="far_wnd") returned 7 [0098.732] CoTaskMemFree (pv=0xff0480) [0098.733] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.733] GetClassNameW (in: hWnd=0x10210, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="coreftpapp") returned 10 [0098.733] CoTaskMemFree (pv=0xff1c38) [0098.733] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.733] GetClassNameW (in: hWnd=0x1020c, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="bitkinex_class") returned 14 [0098.733] CoTaskMemFree (pv=0xff0030) [0098.733] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.733] GetClassNameW (in: hWnd=0x20206, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="barca_") returned 6 [0098.733] CoTaskMemFree (pv=0xff22b0) [0098.733] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.733] GetClassNameW (in: hWnd=0x20204, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="alftp_win") returned 9 [0098.734] CoTaskMemFree (pv=0xfef340) [0098.734] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.734] GetClassNameW (in: hWnd=0x20200, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="absolutetelnetwin") returned 17 [0098.734] CoTaskMemFree (pv=0xfef790) [0098.734] CoTaskMemAlloc (cb=0x20c) returned 0xfeeaa0 [0098.734] GetClassNameW (in: hWnd=0x40074, lpClassName=0xfeeaa0, nMaxCount=260 | out: lpClassName="3dftp_class") returned 11 [0098.734] CoTaskMemFree (pv=0xfeeaa0) [0098.734] CoTaskMemAlloc (cb=0x20c) returned 0xff15c0 [0098.734] GetClassNameW (in: hWnd=0x3007a, lpClassName=0xff15c0, nMaxCount=260 | out: lpClassName="municipality_") returned 13 [0098.735] CoTaskMemFree (pv=0xff15c0) [0098.735] CoTaskMemAlloc (cb=0x20c) returned 0xff0480 [0098.735] GetClassNameW (in: hWnd=0x50062, lpClassName=0xff0480, nMaxCount=260 | out: lpClassName="Companywin") returned 10 [0098.735] CoTaskMemFree (pv=0xff0480) [0098.735] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.735] GetClassNameW (in: hWnd=0x40052, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="Chicksexperiencedclass") returned 22 [0098.735] CoTaskMemFree (pv=0xfef790) [0098.735] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.736] GetClassNameW (in: hWnd=0x30054, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="finishing_lauderdale_window") returned 27 [0098.736] CoTaskMemFree (pv=0xff0f48) [0098.736] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.736] GetClassNameW (in: hWnd=0x30068, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="vietnamese_Latitude_win") returned 23 [0098.736] CoTaskMemFree (pv=0xff1c38) [0098.736] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.736] GetClassNameW (in: hWnd=0x3005a, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="played_secure_wnd") returned 17 [0098.736] CoTaskMemFree (pv=0xfef790) [0098.736] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.736] GetClassNameW (in: hWnd=0x401ea, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="Registrationwindow") returned 18 [0098.737] CoTaskMemFree (pv=0xff0030) [0098.737] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.737] GetClassNameW (in: hWnd=0x30056, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="secclass") returned 8 [0098.737] CoTaskMemFree (pv=0xff1c38) [0098.737] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.737] GetClassNameW (in: hWnd=0x30176, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="Unsigned_Clothes_Lone_wnd") returned 25 [0098.737] CoTaskMemFree (pv=0xff1170) [0098.737] CoTaskMemAlloc (cb=0x20c) returned 0xff15c0 [0098.737] GetClassNameW (in: hWnd=0x601e0, lpClassName=0xff15c0, nMaxCount=260 | out: lpClassName="O_huge_win") returned 10 [0098.738] CoTaskMemFree (pv=0xff15c0) [0098.738] CoTaskMemAlloc (cb=0x20c) returned 0xff06a8 [0098.738] GetClassNameW (in: hWnd=0x6014e, lpClassName=0xff06a8, nMaxCount=260 | out: lpClassName="softballDocls") returned 13 [0098.738] CoTaskMemFree (pv=0xff06a8) [0098.738] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.738] GetClassNameW (in: hWnd=0x5002a, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="smoke_Author_window") returned 19 [0098.738] CoTaskMemFree (pv=0xfeeef0) [0098.738] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.738] GetClassNameW (in: hWnd=0x30106, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="HolderVgwnd") returned 11 [0098.738] CoTaskMemFree (pv=0xfeeef0) [0098.739] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.739] GetClassNameW (in: hWnd=0x30154, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="excitementsorrywindow") returned 21 [0098.739] CoTaskMemFree (pv=0xfef790) [0098.739] CoTaskMemAlloc (cb=0x20c) returned 0xff06a8 [0098.739] GetClassNameW (in: hWnd=0x30150, lpClassName=0xff06a8, nMaxCount=260 | out: lpClassName="uncle_wnd") returned 9 [0098.739] CoTaskMemFree (pv=0xff06a8) [0098.739] CoTaskMemAlloc (cb=0x20c) returned 0xff0d20 [0098.739] GetClassNameW (in: hWnd=0x300e0, lpClassName=0xff0d20, nMaxCount=260 | out: lpClassName="wishlist_organisations_win") returned 26 [0098.739] CoTaskMemFree (pv=0xff0d20) [0098.740] CoTaskMemAlloc (cb=0x20c) returned 0xff06a8 [0098.740] GetClassNameW (in: hWnd=0x500ea, lpClassName=0xff06a8, nMaxCount=260 | out: lpClassName="Pendingapp") returned 10 [0098.740] CoTaskMemFree (pv=0xff06a8) [0098.740] CoTaskMemAlloc (cb=0x20c) returned 0xff1398 [0098.740] GetClassNameW (in: hWnd=0x101fc, lpClassName=0xff1398, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0098.740] CoTaskMemFree (pv=0xff1398) [0098.740] CoTaskMemAlloc (cb=0x20c) returned 0xfef9b8 [0098.740] GetClassNameW (in: hWnd=0x101f4, lpClassName=0xfef9b8, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0098.740] CoTaskMemFree (pv=0xfef9b8) [0098.740] CoTaskMemAlloc (cb=0x20c) returned 0xff15c0 [0098.740] GetClassNameW (in: hWnd=0x101d6, lpClassName=0xff15c0, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0098.741] CoTaskMemFree (pv=0xff15c0) [0098.741] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.741] GetClassNameW (in: hWnd=0x101d0, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.741] CoTaskMemFree (pv=0xff1170) [0098.742] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.742] GetClassNameW (in: hWnd=0x101cc, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.742] CoTaskMemFree (pv=0xff1170) [0098.742] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.742] GetClassNameW (in: hWnd=0x101c0, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="ATL:00007FFCD885E130") returned 20 [0098.742] CoTaskMemFree (pv=0xfee878) [0098.742] CoTaskMemAlloc (cb=0x20c) returned 0xfef9b8 [0098.742] GetClassNameW (in: hWnd=0x10198, lpClassName=0xfef9b8, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0098.742] CoTaskMemFree (pv=0xfef9b8) [0098.743] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.743] GetClassNameW (in: hWnd=0x10196, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0098.743] CoTaskMemFree (pv=0xff0af8) [0098.743] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.743] GetClassNameW (in: hWnd=0x10192, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.743] CoTaskMemFree (pv=0xff22b0) [0098.743] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.743] GetClassNameW (in: hWnd=0x1014c, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0098.743] CoTaskMemFree (pv=0xfee878) [0098.743] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.744] GetClassNameW (in: hWnd=0x1018c, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.744] CoTaskMemFree (pv=0xfee878) [0098.744] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.744] GetClassNameW (in: hWnd=0x1018e, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.744] CoTaskMemFree (pv=0xff0f48) [0098.744] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.744] GetClassNameW (in: hWnd=0x10144, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0098.744] CoTaskMemFree (pv=0xfeeef0) [0098.745] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.745] GetClassNameW (in: hWnd=0x1013c, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0098.745] CoTaskMemFree (pv=0xff22b0) [0098.745] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.745] GetClassNameW (in: hWnd=0x200b2, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.745] CoTaskMemFree (pv=0xff22b0) [0098.745] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.745] GetClassNameW (in: hWnd=0x1011a, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0098.745] CoTaskMemFree (pv=0xff22b0) [0098.745] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.745] GetClassNameW (in: hWnd=0x10112, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0098.746] CoTaskMemFree (pv=0xff1170) [0098.746] CoTaskMemAlloc (cb=0x20c) returned 0xff0d20 [0098.746] GetClassNameW (in: hWnd=0x1010e, lpClassName=0xff0d20, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.746] CoTaskMemFree (pv=0xff0d20) [0098.746] CoTaskMemAlloc (cb=0x20c) returned 0xff06a8 [0098.746] GetClassNameW (in: hWnd=0x1010c, lpClassName=0xff06a8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.747] CoTaskMemFree (pv=0xff06a8) [0098.747] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.747] GetClassNameW (in: hWnd=0x100fc, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.747] CoTaskMemFree (pv=0xfef340) [0098.747] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.747] GetClassNameW (in: hWnd=0x100ee, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0098.747] CoTaskMemFree (pv=0xfee878) [0098.748] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.748] GetClassNameW (in: hWnd=0x100d2, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0098.748] CoTaskMemFree (pv=0xff1170) [0098.748] CoTaskMemAlloc (cb=0x20c) returned 0xff24d8 [0098.748] GetClassNameW (in: hWnd=0x20070, lpClassName=0xff24d8, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0098.748] CoTaskMemFree (pv=0xff24d8) [0098.748] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.748] GetClassNameW (in: hWnd=0x100ae, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0098.748] CoTaskMemFree (pv=0xfef340) [0098.748] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.748] GetClassNameW (in: hWnd=0x10088, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0098.749] CoTaskMemFree (pv=0xff0030) [0098.749] CoTaskMemAlloc (cb=0x20c) returned 0xff1398 [0098.749] GetClassNameW (in: hWnd=0x10082, lpClassName=0xff1398, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0098.749] CoTaskMemFree (pv=0xff1398) [0098.749] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.749] GetClassNameW (in: hWnd=0x20066, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0098.749] CoTaskMemFree (pv=0xff1c38) [0098.749] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.750] GetClassNameW (in: hWnd=0x20032, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0098.750] CoTaskMemFree (pv=0xfef340) [0098.750] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.750] GetClassNameW (in: hWnd=0x1003a, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0098.750] CoTaskMemFree (pv=0xff22b0) [0098.750] CoTaskMemAlloc (cb=0x20c) returned 0xff1398 [0098.750] GetClassNameW (in: hWnd=0x2006c, lpClassName=0xff1398, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0098.750] CoTaskMemFree (pv=0xff1398) [0098.750] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.750] GetClassNameW (in: hWnd=0x100f0, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0098.750] CoTaskMemFree (pv=0xfef790) [0098.751] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.751] GetClassNameW (in: hWnd=0x1015a, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.751] CoTaskMemFree (pv=0xfeeef0) [0098.751] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.751] GetClassNameW (in: hWnd=0x100e6, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0098.751] CoTaskMemFree (pv=0xff1170) [0098.751] CoTaskMemAlloc (cb=0x20c) returned 0xff24d8 [0098.751] GetClassNameW (in: hWnd=0x10092, lpClassName=0xff24d8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.752] CoTaskMemFree (pv=0xff24d8) [0098.752] CoTaskMemAlloc (cb=0x20c) returned 0xff1e60 [0098.752] GetClassNameW (in: hWnd=0x102bc, lpClassName=0xff1e60, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.752] CoTaskMemFree (pv=0xff1e60) [0098.752] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.752] GetClassNameW (in: hWnd=0x102b8, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.752] CoTaskMemFree (pv=0xff1170) [0098.752] CoTaskMemAlloc (cb=0x20c) returned 0xfefbe0 [0098.752] GetClassNameW (in: hWnd=0x202b4, lpClassName=0xfefbe0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.752] CoTaskMemFree (pv=0xfefbe0) [0098.753] CoTaskMemAlloc (cb=0x20c) returned 0xff08d0 [0098.753] GetClassNameW (in: hWnd=0x102ae, lpClassName=0xff08d0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.753] CoTaskMemFree (pv=0xff08d0) [0098.753] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.753] GetClassNameW (in: hWnd=0x102a8, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.753] CoTaskMemFree (pv=0xfee878) [0098.753] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.753] GetClassNameW (in: hWnd=0x202a4, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.753] CoTaskMemFree (pv=0xfef340) [0098.754] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.754] GetClassNameW (in: hWnd=0x202a0, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.754] CoTaskMemFree (pv=0xfef340) [0098.754] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.754] GetClassNameW (in: hWnd=0x2029c, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.754] CoTaskMemFree (pv=0xfeeef0) [0098.754] CoTaskMemAlloc (cb=0x20c) returned 0xff1e60 [0098.754] GetClassNameW (in: hWnd=0x1029a, lpClassName=0xff1e60, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.754] CoTaskMemFree (pv=0xff1e60) [0098.755] CoTaskMemAlloc (cb=0x20c) returned 0xff0d20 [0098.755] GetClassNameW (in: hWnd=0x10296, lpClassName=0xff0d20, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.755] CoTaskMemFree (pv=0xff0d20) [0098.755] CoTaskMemAlloc (cb=0x20c) returned 0xff17e8 [0098.755] GetClassNameW (in: hWnd=0x10292, lpClassName=0xff17e8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.755] CoTaskMemFree (pv=0xff17e8) [0098.755] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.755] GetClassNameW (in: hWnd=0x2028c, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.755] CoTaskMemFree (pv=0xfef340) [0098.755] CoTaskMemAlloc (cb=0x20c) returned 0xff0480 [0098.755] GetClassNameW (in: hWnd=0x20288, lpClassName=0xff0480, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.756] CoTaskMemFree (pv=0xff0480) [0098.756] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.756] GetClassNameW (in: hWnd=0x20284, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.756] CoTaskMemFree (pv=0xfef790) [0098.756] CoTaskMemAlloc (cb=0x20c) returned 0xff24d8 [0098.777] GetClassNameW (in: hWnd=0x20280, lpClassName=0xff24d8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.777] CoTaskMemFree (pv=0xff24d8) [0098.777] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.777] GetClassNameW (in: hWnd=0x1027e, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.777] CoTaskMemFree (pv=0xff22b0) [0098.777] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.777] GetClassNameW (in: hWnd=0x20278, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.777] CoTaskMemFree (pv=0xff0f48) [0098.778] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.778] GetClassNameW (in: hWnd=0x20274, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.778] CoTaskMemFree (pv=0xff0f48) [0098.778] CoTaskMemAlloc (cb=0x20c) returned 0xfeeaa0 [0098.778] GetClassNameW (in: hWnd=0x10270, lpClassName=0xfeeaa0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.778] CoTaskMemFree (pv=0xfeeaa0) [0098.778] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.778] GetClassNameW (in: hWnd=0x1026e, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.778] CoTaskMemFree (pv=0xff0f48) [0098.779] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.779] GetClassNameW (in: hWnd=0x1026a, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.779] CoTaskMemFree (pv=0xff0030) [0098.779] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.779] GetClassNameW (in: hWnd=0x5012a, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.779] CoTaskMemFree (pv=0xfef790) [0098.779] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.779] GetClassNameW (in: hWnd=0x10264, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.779] CoTaskMemFree (pv=0xff1c38) [0098.779] CoTaskMemAlloc (cb=0x20c) returned 0xff06a8 [0098.779] GetClassNameW (in: hWnd=0x2025e, lpClassName=0xff06a8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.780] CoTaskMemFree (pv=0xff06a8) [0098.780] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.780] GetClassNameW (in: hWnd=0x2025a, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.780] CoTaskMemFree (pv=0xfef790) [0098.780] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.780] GetClassNameW (in: hWnd=0x20256, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.780] CoTaskMemFree (pv=0xff0030) [0098.780] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.780] GetClassNameW (in: hWnd=0x10254, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.781] CoTaskMemFree (pv=0xfef340) [0098.781] CoTaskMemAlloc (cb=0x20c) returned 0xff0d20 [0098.781] GetClassNameW (in: hWnd=0x2024e, lpClassName=0xff0d20, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.781] CoTaskMemFree (pv=0xff0d20) [0098.781] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.781] GetClassNameW (in: hWnd=0x1024a, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.781] CoTaskMemFree (pv=0xff1170) [0098.782] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.782] GetClassNameW (in: hWnd=0x20246, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.782] CoTaskMemFree (pv=0xfeeef0) [0098.782] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.782] GetClassNameW (in: hWnd=0x20242, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.782] CoTaskMemFree (pv=0xff0af8) [0098.782] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.782] GetClassNameW (in: hWnd=0x2023e, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.782] CoTaskMemFree (pv=0xff0af8) [0098.782] CoTaskMemAlloc (cb=0x20c) returned 0xff1398 [0098.782] GetClassNameW (in: hWnd=0x1023c, lpClassName=0xff1398, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.783] CoTaskMemFree (pv=0xff1398) [0098.783] CoTaskMemAlloc (cb=0x20c) returned 0xfefbe0 [0098.783] GetClassNameW (in: hWnd=0x10238, lpClassName=0xfefbe0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.783] CoTaskMemFree (pv=0xfefbe0) [0098.783] CoTaskMemAlloc (cb=0x20c) returned 0xff0af8 [0098.783] GetClassNameW (in: hWnd=0x10234, lpClassName=0xff0af8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.783] CoTaskMemFree (pv=0xff0af8) [0098.784] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.784] GetClassNameW (in: hWnd=0x10230, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.784] CoTaskMemFree (pv=0xfeeef0) [0098.784] CoTaskMemAlloc (cb=0x20c) returned 0xff0480 [0098.784] GetClassNameW (in: hWnd=0x1022c, lpClassName=0xff0480, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.784] CoTaskMemFree (pv=0xff0480) [0098.785] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.785] GetClassNameW (in: hWnd=0x20226, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.785] CoTaskMemFree (pv=0xff22b0) [0098.785] CoTaskMemAlloc (cb=0x20c) returned 0xfeeaa0 [0098.785] GetClassNameW (in: hWnd=0x10224, lpClassName=0xfeeaa0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.785] CoTaskMemFree (pv=0xfeeaa0) [0098.785] CoTaskMemAlloc (cb=0x20c) returned 0xfeeaa0 [0098.785] GetClassNameW (in: hWnd=0x2021e, lpClassName=0xfeeaa0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.785] CoTaskMemFree (pv=0xfeeaa0) [0098.785] CoTaskMemAlloc (cb=0x20c) returned 0xff17e8 [0098.786] GetClassNameW (in: hWnd=0x1021c, lpClassName=0xff17e8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.786] CoTaskMemFree (pv=0xff17e8) [0098.787] CoTaskMemAlloc (cb=0x20c) returned 0xff08d0 [0098.787] GetClassNameW (in: hWnd=0x20216, lpClassName=0xff08d0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.787] CoTaskMemFree (pv=0xff08d0) [0098.787] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.787] GetClassNameW (in: hWnd=0x10212, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.787] CoTaskMemFree (pv=0xfef340) [0098.787] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.787] GetClassNameW (in: hWnd=0x2020e, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.787] CoTaskMemFree (pv=0xfeeef0) [0098.788] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.788] GetClassNameW (in: hWnd=0x2020a, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.790] CoTaskMemFree (pv=0xfef790) [0098.790] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.790] GetClassNameW (in: hWnd=0x10208, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.790] CoTaskMemFree (pv=0xfef340) [0098.790] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.791] GetClassNameW (in: hWnd=0x10202, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.791] CoTaskMemFree (pv=0xfef790) [0098.791] CoTaskMemAlloc (cb=0x20c) returned 0xfefbe0 [0098.791] GetClassNameW (in: hWnd=0x301e6, lpClassName=0xfefbe0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.791] CoTaskMemFree (pv=0xfefbe0) [0098.791] CoTaskMemAlloc (cb=0x20c) returned 0xff1e60 [0098.791] GetClassNameW (in: hWnd=0x20076, lpClassName=0xff1e60, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.791] CoTaskMemFree (pv=0xff1e60) [0098.792] CoTaskMemAlloc (cb=0x20c) returned 0xfef9b8 [0098.792] GetClassNameW (in: hWnd=0x2007c, lpClassName=0xfef9b8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.792] CoTaskMemFree (pv=0xfef9b8) [0098.792] CoTaskMemAlloc (cb=0x20c) returned 0xff0480 [0098.792] GetClassNameW (in: hWnd=0x20078, lpClassName=0xff0480, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.792] CoTaskMemFree (pv=0xff0480) [0098.792] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.792] GetClassNameW (in: hWnd=0x40072, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.792] CoTaskMemFree (pv=0xfef340) [0098.793] CoTaskMemAlloc (cb=0x20c) returned 0xfefbe0 [0098.793] GetClassNameW (in: hWnd=0x20050, lpClassName=0xfefbe0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.793] CoTaskMemFree (pv=0xfefbe0) [0098.793] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.793] GetClassNameW (in: hWnd=0x2004e, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.793] CoTaskMemFree (pv=0xff1c38) [0098.793] CoTaskMemAlloc (cb=0x20c) returned 0xfeeaa0 [0098.793] GetClassNameW (in: hWnd=0x3004a, lpClassName=0xfeeaa0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.793] CoTaskMemFree (pv=0xfeeaa0) [0098.794] CoTaskMemAlloc (cb=0x20c) returned 0xfee878 [0098.794] GetClassNameW (in: hWnd=0x30058, lpClassName=0xfee878, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.794] CoTaskMemFree (pv=0xfee878) [0098.794] CoTaskMemAlloc (cb=0x20c) returned 0xfef790 [0098.794] GetClassNameW (in: hWnd=0x4005e, lpClassName=0xfef790, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.794] CoTaskMemFree (pv=0xfef790) [0098.794] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.794] GetClassNameW (in: hWnd=0x201da, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.794] CoTaskMemFree (pv=0xff1c38) [0098.795] CoTaskMemAlloc (cb=0x20c) returned 0xff15c0 [0098.795] GetClassNameW (in: hWnd=0x3006a, lpClassName=0xff15c0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.795] CoTaskMemFree (pv=0xff15c0) [0098.795] CoTaskMemAlloc (cb=0x20c) returned 0xfef9b8 [0098.795] GetClassNameW (in: hWnd=0x50048, lpClassName=0xfef9b8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.795] CoTaskMemFree (pv=0xfef9b8) [0098.795] CoTaskMemAlloc (cb=0x20c) returned 0xff1c38 [0098.795] GetClassNameW (in: hWnd=0x3002c, lpClassName=0xff1c38, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.795] CoTaskMemFree (pv=0xff1c38) [0098.795] CoTaskMemAlloc (cb=0x20c) returned 0xfeeaa0 [0098.795] GetClassNameW (in: hWnd=0x20152, lpClassName=0xfeeaa0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.796] CoTaskMemFree (pv=0xfeeaa0) [0098.796] CoTaskMemAlloc (cb=0x20c) returned 0xfeeaa0 [0098.796] GetClassNameW (in: hWnd=0x20156, lpClassName=0xfeeaa0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.796] CoTaskMemFree (pv=0xfeeaa0) [0098.796] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.796] GetClassNameW (in: hWnd=0x201b8, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.796] CoTaskMemFree (pv=0xff0f48) [0098.796] CoTaskMemAlloc (cb=0x20c) returned 0xfef9b8 [0098.797] GetClassNameW (in: hWnd=0x200e2, lpClassName=0xfef9b8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.797] CoTaskMemFree (pv=0xfef9b8) [0098.797] CoTaskMemAlloc (cb=0x20c) returned 0xfef340 [0098.797] GetClassNameW (in: hWnd=0x101fe, lpClassName=0xfef340, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.797] CoTaskMemFree (pv=0xfef340) [0098.797] CoTaskMemAlloc (cb=0x20c) returned 0xfeeef0 [0098.797] GetClassNameW (in: hWnd=0x101ce, lpClassName=0xfeeef0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.797] CoTaskMemFree (pv=0xfeeef0) [0098.797] CoTaskMemAlloc (cb=0x20c) returned 0xff22b0 [0098.797] GetClassNameW (in: hWnd=0x101c2, lpClassName=0xff22b0, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.797] CoTaskMemFree (pv=0xff22b0) [0098.798] CoTaskMemAlloc (cb=0x20c) returned 0xff17e8 [0098.798] GetClassNameW (in: hWnd=0x10194, lpClassName=0xff17e8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.798] CoTaskMemFree (pv=0xff17e8) [0098.798] CoTaskMemAlloc (cb=0x20c) returned 0xff06a8 [0098.798] GetClassNameW (in: hWnd=0x1011e, lpClassName=0xff06a8, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0098.798] CoTaskMemFree (pv=0xff06a8) [0098.798] CoTaskMemAlloc (cb=0x20c) returned 0xff1170 [0098.798] GetClassNameW (in: hWnd=0x10110, lpClassName=0xff1170, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.799] CoTaskMemFree (pv=0xff1170) [0098.799] CoTaskMemAlloc (cb=0x20c) returned 0xff0030 [0098.799] GetClassNameW (in: hWnd=0x100fe, lpClassName=0xff0030, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.799] CoTaskMemFree (pv=0xff0030) [0098.799] CoTaskMemAlloc (cb=0x20c) returned 0xff0f48 [0098.799] GetClassNameW (in: hWnd=0x1008a, lpClassName=0xff0f48, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.799] CoTaskMemFree (pv=0xff0f48) [0098.799] CoTaskMemAlloc (cb=0x20c) returned 0xff1e60 [0098.799] GetClassNameW (in: hWnd=0x10080, lpClassName=0xff1e60, nMaxCount=260 | out: lpClassName="IME") returned 3 [0098.799] CoTaskMemFree (pv=0xff1e60) [0099.080] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x47c [0099.080] SetEvent (hEvent=0x370) returned 1 [0099.080] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0xb3f234*=0x47c, lpdwindex=0xb3f054 | out: lpdwindex=0xb3f054) returned 0x0 [0099.137] CoGetContextToken (in: pToken=0xb3f100 | out: pToken=0xb3f100) returned 0x0 [0099.137] CoGetContextToken (in: pToken=0xb3f060 | out: pToken=0xb3f060) returned 0x0 [0099.137] WbemDefPath:IUnknown:QueryInterface (in: This=0xfdeb68, riid=0xb3f130*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0xb3f12c | out: ppvObject=0xb3f12c*=0xfdeb68) returned 0x0 [0099.137] WbemDefPath:IUnknown:AddRef (This=0xfdeb68) returned 0x3 [0099.137] WbemDefPath:IUnknown:Release (This=0xfdeb68) returned 0x2 [0099.137] WbemDefPath:IWbemPath:SetText (This=0xfdeb68, uMode=0x4, pszPath="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0099.137] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfdeb68, puCount=0xb3f2a8 | out: puCount=0xb3f2a8*=0x0) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetText (in: This=0xfdeb68, lFlags=2, puBuffLength=0xb3f2a4*=0x0, pszText=0x0 | out: puBuffLength=0xb3f2a4*=0x20, pszText=0x0) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetText (in: This=0xfdeb68, lFlags=2, puBuffLength=0xb3f2a4*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0xb3f2a4*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetInfo (in: This=0xfdeb68, uRequestedInfo=0x0, puResponse=0xb3f2b0 | out: puResponse=0xb3f2b0*=0xc19) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfdeb68, puCount=0xb3f2a8 | out: puCount=0xb3f2a8*=0x0) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetInfo (in: This=0xfdeb68, uRequestedInfo=0x0, puResponse=0xb3f2b0 | out: puResponse=0xb3f2b0*=0xc19) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetInfo (in: This=0xfdeb68, uRequestedInfo=0x0, puResponse=0xb3f2b0 | out: puResponse=0xb3f2b0*=0xc19) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfdeb68, puCount=0xb3f23c | out: puCount=0xb3f23c*=0x0) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbfc60, puCount=0xb3f228 | out: puCount=0xb3f228*=0x2) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetText (in: This=0xfbfc60, lFlags=4, puBuffLength=0xb3f224*=0x0, pszText=0x0 | out: puBuffLength=0xb3f224*=0xf, pszText=0x0) returned 0x0 [0099.138] WbemDefPath:IWbemPath:GetText (in: This=0xfbfc60, lFlags=4, puBuffLength=0xb3f224*=0xf, pszText="00000000000000" | out: puBuffLength=0xb3f224*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0099.138] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x48c [0099.138] SetEvent (hEvent=0x370) returned 1 [0099.138] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0xb3f184*=0x48c, lpdwindex=0xb3efa4 | out: lpdwindex=0xb3efa4) returned 0x0 [0099.141] CoGetContextToken (in: pToken=0xb3f050 | out: pToken=0xb3f050) returned 0x0 [0099.141] CoGetContextToken (in: pToken=0xb3efb0 | out: pToken=0xb3efb0) returned 0x0 [0099.141] WbemDefPath:IUnknown:QueryInterface (in: This=0xfde468, riid=0xb3f080*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0xb3f07c | out: ppvObject=0xb3f07c*=0xfde468) returned 0x0 [0099.141] WbemDefPath:IUnknown:AddRef (This=0xfde468) returned 0x3 [0099.141] WbemDefPath:IUnknown:Release (This=0xfde468) returned 0x2 [0099.141] WbemDefPath:IWbemPath:SetText (This=0xfde468, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0099.141] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfde468, puCount=0xb3f200 | out: puCount=0xb3f200*=0x2) returned 0x0 [0099.141] WbemDefPath:IWbemPath:GetText (in: This=0xfde468, lFlags=4, puBuffLength=0xb3f1fc*=0x0, pszText=0x0 | out: puBuffLength=0xb3f1fc*=0xf, pszText=0x0) returned 0x0 [0099.141] WbemDefPath:IWbemPath:GetText (in: This=0xfde468, lFlags=4, puBuffLength=0xb3f1fc*=0xf, pszText="00000000000000" | out: puBuffLength=0xb3f1fc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0099.231] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0xb3f120*=0x49c, lpdwindex=0xb3efd4 | out: lpdwindex=0xb3efd4) returned 0x0 [0100.493] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfdeb68, puCount=0xb3f2ac | out: puCount=0xb3f2ac*=0x0) returned 0x0 [0100.493] WbemDefPath:IWbemPath:GetText (in: This=0xfdeb68, lFlags=2, puBuffLength=0xb3f2a8*=0x0, pszText=0x0 | out: puBuffLength=0xb3f2a8*=0x20, pszText=0x0) returned 0x0 [0100.493] WbemDefPath:IWbemPath:GetText (in: This=0xfdeb68, lFlags=2, puBuffLength=0xb3f2a8*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0xb3f2a8*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0100.493] WbemDefPath:IWbemPath:GetText (in: This=0xfdeb68, lFlags=2, puBuffLength=0xb3f2b0*=0x0, pszText=0x0 | out: puBuffLength=0xb3f2b0*=0x20, pszText=0x0) returned 0x0 [0100.493] WbemDefPath:IWbemPath:GetText (in: This=0xfdeb68, lFlags=2, puBuffLength=0xb3f2b0*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0xb3f2b0*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0100.494] CoGetContextToken (in: pToken=0xb3f034 | out: pToken=0xb3f034) returned 0x0 [0100.494] CoGetContextToken (in: pToken=0xb3ef98 | out: pToken=0xb3ef98) returned 0x0 [0100.494] CoGetContextToken (in: pToken=0xb3ef98 | out: pToken=0xb3ef98) returned 0x0 [0100.494] CoGetContextToken (in: pToken=0xb3ef40 | out: pToken=0xb3ef40) returned 0x0 [0100.494] IUnknown:QueryInterface (in: This=0xf70108, riid=0x73bef070*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3ef1c | out: ppvObject=0xb3ef1c*=0xf70118) returned 0x0 [0100.495] CObjectContext::ContextCallback () returned 0x0 [0100.497] IUnknown:Release (This=0xf70118) returned 0x1 [0100.497] CoUnmarshalInterface (in: pStm=0xfb94d8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xb3ef8c | out: ppv=0xb3ef8c*=0xf879d4) returned 0x0 [0100.497] CoMarshalInterface (pStm=0xfb94d8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0xf879d4, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0100.497] WbemLocator:IUnknown:QueryInterface (in: This=0xf879d4, riid=0xb3f064*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0xb3f060 | out: ppvObject=0xb3f060*=0xf78080) returned 0x0 [0100.498] WbemLocator:IUnknown:Release (This=0xf879d4) returned 0x1 [0100.498] IWbemServices:GetObject (in: This=0xf78080, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0xb3f264*=0x0, ppCallResult=0x0 | out: ppObject=0xb3f264*=0xff4328, ppCallResult=0x0) returned 0x0 [0100.817] WbemLocator:IUnknown:Release (This=0xf78080) returned 0x0 [0100.822] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfde468, puCount=0xb3f264 | out: puCount=0xb3f264*=0x2) returned 0x0 [0100.823] WbemDefPath:IWbemPath:GetText (in: This=0xfde468, lFlags=4, puBuffLength=0xb3f260*=0x0, pszText=0x0 | out: puBuffLength=0xb3f260*=0xf, pszText=0x0) returned 0x0 [0100.823] WbemDefPath:IWbemPath:GetText (in: This=0xfde468, lFlags=4, puBuffLength=0xb3f260*=0xf, pszText="00000000000000" | out: puBuffLength=0xb3f260*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0100.823] IWbemClassObject:Get (in: This=0xff4328, wszName="VolumeSerialNumber", lFlags=0, pVal=0xb3f260*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a5e138*=0, plFlavor=0x2a5e13c*=0 | out: pVal=0xb3f260*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="B4197730", varVal2=0x0), pType=0x2a5e138*=8, plFlavor=0x2a5e13c*=0) returned 0x0 [0100.823] SysStringByteLen (bstr="B4197730") returned 0x10 [0100.823] SysStringByteLen (bstr="B4197730") returned 0x10 [0100.823] IWbemClassObject:Get (in: This=0xff4328, wszName="VolumeSerialNumber", lFlags=0, pVal=0xb3f268*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x2a5e138*=8, plFlavor=0x2a5e13c*=0 | out: pVal=0xb3f268*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="B4197730", varVal2=0x0), pType=0x2a5e138*=8, plFlavor=0x2a5e13c*=0) returned 0x0 [0100.823] SysStringByteLen (bstr="B4197730") returned 0x10 [0100.823] SysStringByteLen (bstr="B4197730") returned 0x10 [0100.926] CreateMutexW (lpMutexAttributes=0x0, bInitialOwner=1, lpName="DE84DE9E8A26CD9D1E9BA8CD209042B0") returned 0x4a0 [0100.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", nBufferLength=0x105, lpBuffer=0xb3edcc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", lpFilePart=0x0) returned 0x25 [0100.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f280) returned 1 [0100.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\tmp.txt"), fInfoLevelId=0x0, lpFileInformation=0xb3f2fc | out: lpFileInformation=0xb3f2fc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0100.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f27c) returned 1 [0102.690] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe.config", nBufferLength=0x105, lpBuffer=0xb3ebac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe.config", lpFilePart=0x0) returned 0x29 [0103.757] GetCurrentProcess () returned 0xffffffff [0103.757] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3ef14 | out: TokenHandle=0xb3ef14*=0x4a4) returned 1 [0103.762] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0xb3e9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0103.763] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xb3ef0c | out: lpFileInformation=0xb3ef0c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0103.764] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0xb3e96c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0103.765] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xb3ef14 | out: lpFileInformation=0xb3ef14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0103.766] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0xb3e908, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0103.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3ee4c) returned 1 [0103.767] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4a8 [0103.767] GetFileType (hFile=0x4a8) returned 0x1 [0103.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3ee48) returned 1 [0103.767] GetFileType (hFile=0x4a8) returned 0x1 [0103.849] GetFileSize (in: hFile=0x4a8, lpFileSizeHigh=0xb3ef08 | out: lpFileSizeHigh=0xb3ef08*=0x0) returned 0x8c8f [0103.850] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3eec4, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3eec4*=0x1000, lpOverlapped=0x0) returned 1 [0103.905] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3ed70, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3ed70*=0x1000, lpOverlapped=0x0) returned 1 [0103.908] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3ec24, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3ec24*=0x1000, lpOverlapped=0x0) returned 1 [0103.909] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3ec24, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3ec24*=0x1000, lpOverlapped=0x0) returned 1 [0103.909] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3ec24, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3ec24*=0x1000, lpOverlapped=0x0) returned 1 [0103.910] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3eb5c, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3eb5c*=0x1000, lpOverlapped=0x0) returned 1 [0103.914] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3ece0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3ece0*=0x1000, lpOverlapped=0x0) returned 1 [0103.916] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3ebec, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3ebec*=0x1000, lpOverlapped=0x0) returned 1 [0103.916] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3ebec, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3ebec*=0xc8f, lpOverlapped=0x0) returned 1 [0103.917] ReadFile (in: hFile=0x4a8, lpBuffer=0x2a6b598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3ecb0, lpOverlapped=0x0 | out: lpBuffer=0x2a6b598*, lpNumberOfBytesRead=0xb3ecb0*=0x0, lpOverlapped=0x0) returned 1 [0103.917] CloseHandle (hObject=0x4a8) returned 1 [0103.918] GetCurrentProcess () returned 0xffffffff [0103.918] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3f05c | out: TokenHandle=0xb3f05c*=0x4a8) returned 1 [0103.919] GetCurrentProcess () returned 0xffffffff [0103.919] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3f05c | out: TokenHandle=0xb3f05c*=0x4ac) returned 1 [0103.920] GetCurrentProcess () returned 0xffffffff [0103.920] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3ef14 | out: TokenHandle=0xb3ef14*=0x4b8) returned 1 [0103.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe.config"), fInfoLevelId=0x0, lpFileInformation=0xb3ef0c | out: lpFileInformation=0xb3ef0c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0103.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe.config", nBufferLength=0x105, lpBuffer=0xb3e96c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe.config", lpFilePart=0x0) returned 0x29 [0103.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe.config"), fInfoLevelId=0x0, lpFileInformation=0xb3ef14 | out: lpFileInformation=0xb3ef14*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0103.921] GetCurrentProcess () returned 0xffffffff [0103.921] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3f05c | out: TokenHandle=0xb3f05c*=0x4bc) returned 1 [0103.921] GetCurrentProcess () returned 0xffffffff [0103.922] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3f05c | out: TokenHandle=0xb3f05c*=0x4c0) returned 1 [0103.982] GetCurrentProcess () returned 0xffffffff [0103.982] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eebc | out: TokenHandle=0xb3eebc*=0x4c4) returned 1 [0104.005] GetCurrentProcess () returned 0xffffffff [0104.005] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eecc | out: TokenHandle=0xb3eecc*=0x4c8) returned 1 [0104.061] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x4cc [0104.061] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4d0 [0104.226] GetCurrentProcess () returned 0xffffffff [0104.226] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3ef1c | out: TokenHandle=0xb3ef1c*=0x4d4) returned 1 [0104.230] GetCurrentProcess () returned 0xffffffff [0104.230] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3ef2c | out: TokenHandle=0xb3ef2c*=0x4d8) returned 1 [0104.503] QueryPerformanceFrequency (in: lpFrequency=0xcc91e0 | out: lpFrequency=0xcc91e0*=100000000) returned 1 [0104.504] QueryPerformanceCounter (in: lpPerformanceCount=0xb3f2a0 | out: lpPerformanceCount=0xb3f2a0*=19978418093) returned 1 [0104.511] GetCurrentProcess () returned 0xffffffff [0104.511] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eee8 | out: TokenHandle=0xb3eee8*=0x4dc) returned 1 [0104.515] GetCurrentProcess () returned 0xffffffff [0104.515] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eef8 | out: TokenHandle=0xb3eef8*=0x4e0) returned 1 [0104.537] GetCurrentProcess () returned 0xffffffff [0104.537] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eefc | out: TokenHandle=0xb3eefc*=0x4e4) returned 1 [0104.540] GetCurrentProcess () returned 0xffffffff [0104.540] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3ef0c | out: TokenHandle=0xb3ef0c*=0x4e8) returned 1 [0104.546] GetCurrentProcess () returned 0xffffffff [0104.546] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3f184 | out: TokenHandle=0xb3f184*=0x4ec) returned 1 [0104.583] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3e2bc | out: phkResult=0xb3e2bc*=0x4f0) returned 0x0 [0104.584] RegQueryValueExW (in: hKey=0x4f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0xb3e2dc, lpData=0x0, lpcbData=0xb3e2d8*=0x0 | out: lpType=0xb3e2dc*=0x1, lpData=0x0, lpcbData=0xb3e2d8*=0xe) returned 0x0 [0104.584] RegQueryValueExW (in: hKey=0x4f0, lpValueName="InstallationType", lpReserved=0x0, lpType=0xb3e2dc, lpData=0x2a8d570, lpcbData=0xb3e2d8*=0xe | out: lpType=0xb3e2dc*=0x1, lpData="Client", lpcbData=0xb3e2d8*=0xe) returned 0x0 [0104.584] RegCloseKey (hKey=0x4f0) returned 0x0 [0104.811] CoTaskMemAlloc (cb=0xcc0) returned 0x1013160 [0104.813] RasEnumConnectionsW (in: param_1=0x1013160, param_2=0xb3f194, param_3=0xb3f198 | out: param_1=0x1013160, param_2=0xb3f194, param_3=0xb3f198) returned 0x0 [0105.098] CoTaskMemFree (pv=0x1013160) [0105.132] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xb3ef80 | out: lpWSAData=0xb3ef80) returned 0 [0105.158] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x548 [0105.669] setsockopt (s=0x548, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0105.669] closesocket (s=0x548) returned 0 [0105.670] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x548 [0105.671] setsockopt (s=0x548, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0105.672] closesocket (s=0x548) returned 0 [0105.672] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x548 [0105.672] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x54c [0105.673] ioctlsocket (in: s=0x548, cmd=-2147195266, argp=0xb3f19c | out: argp=0xb3f19c) returned 0 [0105.673] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x550 [0105.674] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x554 [0105.674] ioctlsocket (in: s=0x550, cmd=-2147195266, argp=0xb3f19c | out: argp=0xb3f19c) returned 0 [0105.675] WSAIoctl (in: s=0x548, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0xb3f184, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0xb3f184, lpOverlapped=0x0) returned -1 [0105.678] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0xb3eeb4, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0105.686] WSAEventSelect (s=0x548, hEventObject=0x54c, lNetworkEvents=512) returned 0 [0105.687] WSAIoctl (in: s=0x550, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0xb3f184, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0xb3f184, lpOverlapped=0x0) returned -1 [0105.687] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0xb3eeb4, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0105.687] WSAEventSelect (s=0x550, hEventObject=0x554, lNetworkEvents=512) returned 0 [0105.687] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x55c [0105.688] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x55c, param_3=0x3) returned 0x0 [0105.697] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0xb3f1b0 | out: phkResult=0xb3f1b0*=0x574) returned 0x0 [0105.698] RegOpenKeyExW (in: hKey=0x574, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3f164 | out: phkResult=0xb3f164*=0x578) returned 0x0 [0105.698] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x57c [0105.698] RegNotifyChangeKeyValue (hKey=0x578, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x57c, fAsynchronous=1) returned 0x0 [0105.699] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3f168 | out: phkResult=0xb3f168*=0x580) returned 0x0 [0105.699] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x584 [0105.699] RegNotifyChangeKeyValue (hKey=0x580, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x584, fAsynchronous=1) returned 0x0 [0105.700] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3f168 | out: phkResult=0xb3f168*=0x588) returned 0x0 [0105.700] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x58c [0105.700] RegNotifyChangeKeyValue (hKey=0x588, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x58c, fAsynchronous=1) returned 0x0 [0105.700] GetCurrentProcess () returned 0xffffffff [0105.700] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3f154 | out: TokenHandle=0xb3f154*=0x590) returned 1 [0105.704] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3ea60 | out: phkResult=0xb3ea60*=0x594) returned 0x0 [0105.704] RegQueryValueExW (in: hKey=0x594, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0xb3ea7c, lpData=0x0, lpcbData=0xb3ea78*=0x0 | out: lpType=0xb3ea7c*=0x0, lpData=0x0, lpcbData=0xb3ea78*=0x0) returned 0x2 [0105.704] RegCloseKey (hKey=0x594) returned 0x0 [0105.736] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x1019c80 [0106.824] WinHttpSetTimeouts (hInternet=0x1019c80, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0106.825] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xb3f164 | out: pProxyConfig=0xb3f164) returned 1 [0107.569] CoTaskMemAlloc (cb=0x20c) returned 0x57cfd70 [0107.569] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x57cfd70, nSize=0x104 | out: lpBuffer="") returned 0x0 [0107.569] CoTaskMemFree (pv=0x57cfd70) [0107.569] CoTaskMemAlloc (cb=0x20c) returned 0x57cf6f8 [0107.569] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x57cf6f8, nSize=0x104 | out: lpBuffer="") returned 0x0 [0107.570] CoTaskMemFree (pv=0x57cf6f8) [0107.648] EtwEventRegister (in: ProviderId=0x2a9043c, EnableCallback=0x4fa077e, CallbackContext=0x0, RegHandle=0x2a90418 | out: RegHandle=0x2a90418) returned 0x0 [0107.656] GetCurrentProcess () returned 0xffffffff [0107.656] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eec4 | out: TokenHandle=0xb3eec4*=0x5d4) returned 1 [0107.658] GetCurrentProcess () returned 0xffffffff [0107.658] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eed4 | out: TokenHandle=0xb3eed4*=0x5e0) returned 1 [0107.672] EtwEventRegister (in: ProviderId=0x2a91ef0, EnableCallback=0x4fa07a6, CallbackContext=0x0, RegHandle=0x2a91ecc | out: RegHandle=0x2a91ecc) returned 0x0 [0107.672] EtwEventSetInformation (RegHandle=0x57cb930, InformationClass=0x67, EventInformation=0x2, InformationLength=0x2a91e90) returned 0x0 [0107.677] SetEvent (hEvent=0x4cc) returned 1 [0107.741] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0c4*=0x55c, lpdwindex=0xb3eee4 | out: lpdwindex=0xb3eee4) returned 0x80010115 [0107.742] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0a4*=0x54c, lpdwindex=0xb3eec4 | out: lpdwindex=0xb3eec4) returned 0x80010115 [0107.742] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0a4*=0x554, lpdwindex=0xb3eec4 | out: lpdwindex=0xb3eec4) returned 0x80010115 [0107.743] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0f8*=0x57c, lpdwindex=0xb3ef14 | out: lpdwindex=0xb3ef14) returned 0x80010115 [0107.743] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0f8*=0x584, lpdwindex=0xb3ef14 | out: lpdwindex=0xb3ef14) returned 0x80010115 [0107.743] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0f8*=0x58c, lpdwindex=0xb3ef14 | out: lpdwindex=0xb3ef14) returned 0x80010115 [0107.748] GetCurrentProcess () returned 0xffffffff [0107.748] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3ee34 | out: TokenHandle=0xb3ee34*=0x5fc) returned 1 [0107.749] GetCurrentProcess () returned 0xffffffff [0107.749] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3ee44 | out: TokenHandle=0xb3ee44*=0x600) returned 1 [0107.750] SetEvent (hEvent=0x4cc) returned 1 [0107.933] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0xb3f110 | out: pFixedInfo=0x0, pOutBufLen=0xb3f110) returned 0x6f [0109.235] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x57cc900 [0109.236] GetNetworkParams (in: pFixedInfo=0x57cc900, pOutBufLen=0xb3f110 | out: pFixedInfo=0x57cc900, pOutBufLen=0xb3f110) returned 0x0 [0109.274] LocalFree (hMem=0x57cc900) returned 0x0 [0109.275] CoTaskMemAlloc (cb=0x20c) returned 0x57cf2a8 [0109.275] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x57cf2a8, nSize=0x104 | out: lpBuffer="") returned 0x0 [0109.276] CoTaskMemFree (pv=0x57cf2a8) [0109.276] CoTaskMemAlloc (cb=0x20c) returned 0x57cf4d0 [0109.276] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x57cf4d0, nSize=0x104 | out: lpBuffer="") returned 0x0 [0109.276] CoTaskMemFree (pv=0x57cf4d0) [0109.279] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x644 [0109.303] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x61c [0109.304] GetAddrInfoW (in: pNodeName="n2019cov.000webhostapp.com", pServiceName=0x0, pHints=0xb3eff8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0xb3efa0 | out: ppResult=0xb3efa0*=0x1012750*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="us-east-1.route-1.000webhost.awex.io", ai_addr=0x57c9c00*(sa_family=2, sin_port=0x0, sin_addr="145.14.144.249"), ai_next=0x0)) returned 0 [0109.889] FreeAddrInfoW (pAddrInfo=0x1012750*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="us-east-1.route-1.000webhost.awex.io", ai_addr=0x57c9c00*(sa_family=2, sin_port=0x0, sin_addr="145.14.144.249"), ai_next=0x0)) [0109.891] GetAddrInfoW (in: pNodeName="n2019cov.000webhostapp.com", pServiceName=0x0, pHints=0xb3eff8*(ai_flags=131072, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0xb3efa0 | out: ppResult=0xb3efa0*=0x1012778*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="n2019cov.000webhostapp.com", ai_addr=0x57c9be8*(sa_family=2, sin_port=0x0, sin_addr="145.14.144.249"), ai_next=0x0)) returned 0 [0109.918] FreeAddrInfoW (pAddrInfo=0x1012778*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="n2019cov.000webhostapp.com", ai_addr=0x57c9be8*(sa_family=2, sin_port=0x0, sin_addr="145.14.144.249"), ai_next=0x0)) [0110.750] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x654 [0110.751] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x658 [0110.751] ioctlsocket (in: s=0x654, cmd=-2147195266, argp=0xb3efcc | out: argp=0xb3efcc) returned 0 [0110.751] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x65c [0110.751] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x660 [0110.751] ioctlsocket (in: s=0x65c, cmd=-2147195266, argp=0xb3efcc | out: argp=0xb3efcc) returned 0 [0110.751] WSAIoctl (in: s=0x654, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0xb3efb4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0xb3efb4, lpOverlapped=0x0) returned -1 [0110.752] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0xb3ece4, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0110.755] WSAEventSelect (s=0x654, hEventObject=0x658, lNetworkEvents=512) returned 0 [0110.755] WSAIoctl (in: s=0x65c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0xb3efb4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0xb3efb4, lpOverlapped=0x0) returned -1 [0110.755] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0xb3ece4, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0110.755] WSAEventSelect (s=0x65c, hEventObject=0x660, lNetworkEvents=512) returned 0 [0110.756] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0xb3efb0*=0x0 | out: AdapterAddresses=0x0, SizePointer=0xb3efb0*=0x818) returned 0x6f [0110.815] LocalAlloc (uFlags=0x0, uBytes=0x818) returned 0x57d75d0 [0110.815] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x57d75d0, SizePointer=0xb3efb0*=0x818 | out: AdapterAddresses=0x57d75d0*(Alignment=0x300000178, Length=0x178, IfIndex=0x3, Next=0x57d7880, AdapterName="{9E48833B-70C6-43EE-85DC-893C1782D802}", FirstUnicastAddress=0x57d77f4, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection #2", FriendlyName="Ethernet 2", PhysicalAddress=([0]=0x0, [1]=0x1a, [2]=0xcf, [3]=0x9c, [4]=0x8c, [5]=0x73, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x3, ZoneIndices=([0]=0x3, [1]=0x3, [2]=0x3, [3]=0x3, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0x19, Ipv6Metric=0x19, Luid=0x6008002000000, Dhcpv4Server.lpSockaddr=0x57d7748*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11e7933cfae992b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x23, [5]=0x7d, [6]=0xeb, [7]=0x9, [8]=0x7c, [9]=0x4a, [10]=0x82, [11]=0x56, [12]=0xb9, [13]=0x2b, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x57c4a82, FirstDnsSuffix=0x0), SizePointer=0xb3efb0*=0x818) returned 0x0 [0110.847] LocalFree (hMem=0x57d75d0) returned 0x0 [0110.866] WSAConnect (in: s=0x644, name=0x2a9cba4*(sa_family=2, sin_port=0x1bb, sin_addr="145.14.144.249"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0111.002] closesocket (s=0x61c) returned 0 [0111.013] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3ef00 | out: phkResult=0xb3ef00*=0x61c) returned 0x0 [0111.014] RegQueryValueExW (in: hKey=0x61c, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0xb3ef1c, lpData=0x0, lpcbData=0xb3ef18*=0x0 | out: lpType=0xb3ef1c*=0x0, lpData=0x0, lpcbData=0xb3ef18*=0x0) returned 0x2 [0111.014] RegCloseKey (hKey=0x61c) returned 0x0 [0111.021] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3ef04 | out: phkResult=0xb3ef04*=0x61c) returned 0x0 [0111.022] RegQueryValueExW (in: hKey=0x61c, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0xb3ef20, lpData=0x0, lpcbData=0xb3ef1c*=0x0 | out: lpType=0xb3ef20*=0x0, lpData=0x0, lpcbData=0xb3ef1c*=0x0) returned 0x2 [0111.022] RegCloseKey (hKey=0x61c) returned 0x0 [0111.024] GetCurrentProcessId () returned 0x1180 [0111.027] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xb3e79c | out: lpLuid=0xb3e79c*(LowPart=0x14, HighPart=0)) returned 1 [0111.029] GetCurrentProcess () returned 0xffffffff [0111.030] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xb3e798 | out: TokenHandle=0xb3e798*=0x64c) returned 1 [0111.030] AdjustTokenPrivileges (in: TokenHandle=0x64c, DisableAllPrivileges=0, NewState=0x2a9f8e4*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0111.030] CloseHandle (hObject=0x64c) returned 1 [0111.031] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1180) returned 0x64c [0111.049] EnumProcessModules (in: hProcess=0x64c, lphModule=0x2a9f928, cb=0x100, lpcbNeeded=0xb3ef0c | out: lphModule=0x2a9f928, lpcbNeeded=0xb3ef0c) returned 1 [0111.049] EnumProcessModules (in: hProcess=0x64c, lphModule=0x2a9fa34, cb=0x200, lpcbNeeded=0xb3ef0c | out: lphModule=0x2a9fa34, lpcbNeeded=0xb3ef0c) returned 1 [0111.050] GetModuleInformation (in: hProcess=0x64c, hModule=0x770000, lpmodinfo=0x2a9fc74, cb=0xc | out: lpmodinfo=0x2a9fc74*(lpBaseOfDll=0x770000, SizeOfImage=0x20000, EntryPoint=0x0)) returned 1 [0111.051] CoTaskMemAlloc (cb=0x804) returned 0x57d75d0 [0111.051] GetModuleBaseNameW (in: hProcess=0x64c, hModule=0x770000, lpBaseName=0x57d75d0, nSize=0x800 | out: lpBaseName="ctfmon.exe") returned 0xa [0111.051] CoTaskMemFree (pv=0x57d75d0) [0111.051] CoTaskMemAlloc (cb=0x804) returned 0x57d75d0 [0111.051] GetModuleFileNameExW (in: hProcess=0x64c, hModule=0x770000, lpFilename=0x57d75d0, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe")) returned 0x22 [0111.052] CoTaskMemFree (pv=0x57d75d0) [0111.052] CloseHandle (hObject=0x64c) returned 1 [0111.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x105, lpBuffer=0xb3ea08, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpFilePart=0x0) returned 0x22 [0111.052] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SchSendAuxRecord", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3ef04 | out: phkResult=0xb3ef04*=0x0) returned 0x2 [0111.053] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3ef04 | out: phkResult=0xb3ef04*=0x64c) returned 0x0 [0111.053] RegQueryValueExW (in: hKey=0x64c, lpValueName="SchSendAuxRecord", lpReserved=0x0, lpType=0xb3ef20, lpData=0x0, lpcbData=0xb3ef1c*=0x0 | out: lpType=0xb3ef20*=0x0, lpData=0x0, lpcbData=0xb3ef1c*=0x0) returned 0x2 [0111.053] RegCloseKey (hKey=0x64c) returned 0x0 [0111.054] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3ef04 | out: phkResult=0xb3ef04*=0x64c) returned 0x0 [0111.054] RegQueryValueExW (in: hKey=0x64c, lpValueName="SystemDefaultTlsVersions", lpReserved=0x0, lpType=0xb3ef20, lpData=0x0, lpcbData=0xb3ef1c*=0x0 | out: lpType=0xb3ef20*=0x0, lpData=0x0, lpcbData=0xb3ef1c*=0x0) returned 0x2 [0111.054] RegCloseKey (hKey=0x64c) returned 0x0 [0111.059] GetCurrentProcessId () returned 0x1180 [0111.059] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1180) returned 0x64c [0111.060] EnumProcessModules (in: hProcess=0x64c, lphModule=0x2aa28e0, cb=0x100, lpcbNeeded=0xb3ef04 | out: lphModule=0x2aa28e0, lpcbNeeded=0xb3ef04) returned 1 [0111.060] EnumProcessModules (in: hProcess=0x64c, lphModule=0x2aa29ec, cb=0x200, lpcbNeeded=0xb3ef04 | out: lphModule=0x2aa29ec, lpcbNeeded=0xb3ef04) returned 1 [0111.060] GetModuleInformation (in: hProcess=0x64c, hModule=0x770000, lpmodinfo=0x2aa2c2c, cb=0xc | out: lpmodinfo=0x2aa2c2c*(lpBaseOfDll=0x770000, SizeOfImage=0x20000, EntryPoint=0x0)) returned 1 [0111.060] CoTaskMemAlloc (cb=0x804) returned 0x57d75d0 [0111.060] GetModuleBaseNameW (in: hProcess=0x64c, hModule=0x770000, lpBaseName=0x57d75d0, nSize=0x800 | out: lpBaseName="ctfmon.exe") returned 0xa [0111.060] CoTaskMemFree (pv=0x57d75d0) [0111.060] CoTaskMemAlloc (cb=0x804) returned 0x57d75d0 [0111.060] GetModuleFileNameExW (in: hProcess=0x64c, hModule=0x770000, lpFilename=0x57d75d0, nSize=0x800 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe")) returned 0x22 [0111.061] CoTaskMemFree (pv=0x57d75d0) [0111.061] CloseHandle (hObject=0x64c) returned 1 [0111.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x105, lpBuffer=0xb3ea00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpFilePart=0x0) returned 0x22 [0111.061] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.RequireCertificateEKUs", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3eefc | out: phkResult=0xb3eefc*=0x0) returned 0x2 [0111.061] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0xb3eefc | out: phkResult=0xb3eefc*=0x64c) returned 0x0 [0111.061] RegQueryValueExW (in: hKey=0x64c, lpValueName="RequireCertificateEKUs", lpReserved=0x0, lpType=0xb3ef18, lpData=0x0, lpcbData=0xb3ef14*=0x0 | out: lpType=0xb3ef18*=0x0, lpData=0x0, lpcbData=0xb3ef14*=0x0) returned 0x2 [0111.061] RegCloseKey (hKey=0x64c) returned 0x0 [0111.069] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x1009090 [0111.170] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x1009090, dwGroupId=0x0) returned 0x0 [0111.189] LocalFree (hMem=0x1009090) returned 0x0 [0111.189] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x57c57e8 [0111.189] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x57c57e8, dwGroupId=0x0) returned 0x0 [0111.190] LocalFree (hMem=0x57c57e8) returned 0x0 [0111.236] EnumerateSecurityPackagesW (in: pcPackages=0xb3ef40, ppPackageInfo=0xb3eed4 | out: pcPackages=0xb3ef40, ppPackageInfo=0xb3eed4) returned 0x0 [0111.249] FreeContextBuffer (in: pvContextBuffer=0x57c7298 | out: pvContextBuffer=0x57c7298) returned 0x0 [0111.263] GetCurrentProcess () returned 0xffffffff [0111.263] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3ed04 | out: TokenHandle=0xb3ed04*=0x66c) returned 1 [0111.265] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x2aa52e4, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0xb3ed58, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x2aa69bc, ptsExpiry=0xb3ecdc | out: phCredential=0x2aa69bc, ptsExpiry=0xb3ecdc) returned 0x0 [0112.392] InitializeSecurityContextW (in: phCredential=0xb3ed18, phContext=0x0, pTargetName=0x2a9ccb0, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x2aa6bc0, pOutput=0x2aa6b58, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3ed10 | out: phNewContext=0x2aa6bc0, pOutput=0x2aa6b58, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3ed10) returned 0x90312 [0112.393] FreeContextBuffer (in: pvContextBuffer=0xffdfa8 | out: pvContextBuffer=0xffdfa8) returned 0x0 [0112.398] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000 [0112.398] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="AppPolicyGetClrCompat", cchWideChar=21, lpMultiByteStr=0xb3ed58, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AppPolicyGetClrCompatãâq\x92\x84t\x86ðù°sðô³", lpUsedDefaultChar=0x0) returned 21 [0112.399] GetProcAddress (hModule=0x772d0000, lpProcName="AppPolicyGetClrCompat") returned 0x74c968b0 [0112.401] AppPolicyGetClrCompat () returned 0x0 [0112.403] send (s=0x644, buf=0x2aa6bd4*, len=134, flags=0) returned 134 [0112.405] recv (in: s=0x644, buf=0x2aa6bd4, len=5, flags=0 | out: buf=0x2aa6bd4*) returned 5 [0112.543] recv (in: s=0x644, buf=0x2aa6bd9, len=65, flags=0 | out: buf=0x2aa6bd9*) returned 65 [0112.543] InitializeSecurityContextW (in: phCredential=0xb3ec70, phContext=0xb3ed00, pTargetName=0x2a9ccb0, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2aa6fb8, Reserved2=0x0, phNewContext=0x2aa6bc0, pOutput=0x2aa6fcc, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3ec68 | out: phNewContext=0x2aa6bc0, pOutput=0x2aa6fcc, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3ec68) returned 0x90312 [0112.547] recv (in: s=0x644, buf=0x2aa705c, len=5, flags=0 | out: buf=0x2aa705c*) returned 5 [0112.548] recv (in: s=0x644, buf=0x2aa7075, len=3775, flags=0 | out: buf=0x2aa7075*) returned 3775 [0112.548] InitializeSecurityContextW (in: phCredential=0xb3ebcc, phContext=0xb3ec5c, pTargetName=0x2a9ccb0, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2aa7fa4, Reserved2=0x0, phNewContext=0x2aa6bc0, pOutput=0x2aa7fb8, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3ebc4 | out: phNewContext=0x2aa6bc0, pOutput=0x2aa7fb8, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3ebc4) returned 0x90312 [0112.551] recv (in: s=0x644, buf=0x2aa8048, len=5, flags=0 | out: buf=0x2aa8048*) returned 5 [0112.551] recv (in: s=0x644, buf=0x2aa8061, len=298, flags=0 | out: buf=0x2aa8061*) returned 298 [0112.551] InitializeSecurityContextW (in: phCredential=0xb3eb28, phContext=0xb3ebb8, pTargetName=0x2a9ccb0, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2aa81fc, Reserved2=0x0, phNewContext=0x2aa6bc0, pOutput=0x2aa8210, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3eb20 | out: phNewContext=0x2aa6bc0, pOutput=0x2aa8210, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3eb20) returned 0x90312 [0112.552] recv (in: s=0x644, buf=0x2aa82a0, len=5, flags=0 | out: buf=0x2aa82a0*) returned 5 [0112.552] recv (in: s=0x644, buf=0x2aa82b9, len=4, flags=0 | out: buf=0x2aa82b9*) returned 4 [0112.552] InitializeSecurityContextW (in: phCredential=0xb3ea84, phContext=0xb3eb14, pTargetName=0x2a9ccb0, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2aa8330, Reserved2=0x0, phNewContext=0x2aa6bc0, pOutput=0x2aa8344, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3ea7c | out: phNewContext=0x2aa6bc0, pOutput=0x2aa8344, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3ea7c) returned 0x90312 [0112.587] FreeContextBuffer (in: pvContextBuffer=0xfd2768 | out: pvContextBuffer=0xfd2768) returned 0x0 [0112.587] send (s=0x644, buf=0x2aa83c0*, len=101, flags=0) returned 101 [0112.587] recv (in: s=0x644, buf=0x2aa83c0, len=5, flags=0 | out: buf=0x2aa83c0*) returned 5 [0112.726] recv (in: s=0x644, buf=0x2aa844d, len=186, flags=0 | out: buf=0x2aa844d*) returned 186 [0112.727] InitializeSecurityContextW (in: phCredential=0xb3e9e0, phContext=0xb3ea70, pTargetName=0x2a9ccb0, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2aa8578, Reserved2=0x0, phNewContext=0x2aa6bc0, pOutput=0x2aa858c, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3e9d8 | out: phNewContext=0x2aa6bc0, pOutput=0x2aa858c, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3e9d8) returned 0x90312 [0112.727] recv (in: s=0x644, buf=0x2aa861c, len=5, flags=0 | out: buf=0x2aa861c*) returned 5 [0112.727] recv (in: s=0x644, buf=0x2aa8635, len=1, flags=0 | out: buf=0x2aa8635*) returned 1 [0112.727] InitializeSecurityContextW (in: phCredential=0xb3e93c, phContext=0xb3e9cc, pTargetName=0x2a9ccb0, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2aa86a8, Reserved2=0x0, phNewContext=0x2aa6bc0, pOutput=0x2aa86bc, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3e934 | out: phNewContext=0x2aa6bc0, pOutput=0x2aa86bc, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3e934) returned 0x90312 [0112.728] recv (in: s=0x644, buf=0x2aa874c, len=5, flags=0 | out: buf=0x2aa874c*) returned 5 [0112.728] recv (in: s=0x644, buf=0x2aa8765, len=48, flags=0 | out: buf=0x2aa8765*) returned 48 [0112.728] InitializeSecurityContextW (in: phCredential=0xb3e898, phContext=0xb3e928, pTargetName=0x2a9ccb0, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2aa8808, Reserved2=0x0, phNewContext=0x2aa6bc0, pOutput=0x2aa881c, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3e890 | out: phNewContext=0x2aa6bc0, pOutput=0x2aa881c, pfContextAttr=0x2aa52a8, ptsExpiry=0xb3e890) returned 0x0 [0113.945] QueryContextAttributesW (in: phContext=0x2aa6bc0, ulAttribute=0x4, pBuffer=0x2aa88c8 | out: pBuffer=0x2aa88c8) returned 0x0 [0113.945] QueryContextAttributesW (in: phContext=0x2aa6bc0, ulAttribute=0x5a, pBuffer=0x2aa8920 | out: pBuffer=0x2aa8920) returned 0x0 [0113.947] QueryContextAttributesW (in: phContext=0x2aa6bc0, ulAttribute=0x53, pBuffer=0x2aa89cc | out: pBuffer=0x2aa89cc) returned 0x0 [0113.953] CertDuplicateCertificateContext (pCertContext=0x1003518) returned 0x1003518 [0113.954] CertDuplicateStore (hCertStore=0xfcfc20) returned 0xfcfc20 [0113.955] CertEnumCertificatesInStore (hCertStore=0xfcfc20, pPrevCertContext=0x0) returned 0x10035b8 [0113.955] CertDuplicateCertificateContext (pCertContext=0x10035b8) returned 0x10035b8 [0113.955] CertEnumCertificatesInStore (hCertStore=0xfcfc20, pPrevCertContext=0x10035b8) returned 0x1003568 [0113.955] CertDuplicateCertificateContext (pCertContext=0x1003568) returned 0x1003568 [0114.022] CertEnumCertificatesInStore (hCertStore=0xfcfc20, pPrevCertContext=0x1003568) returned 0x1003518 [0114.022] CertDuplicateCertificateContext (pCertContext=0x1003518) returned 0x1003518 [0114.022] CertEnumCertificatesInStore (hCertStore=0xfcfc20, pPrevCertContext=0x1003518) returned 0x0 [0114.022] CertCloseStore (hCertStore=0xfcfc20, dwFlags=0x0) returned 1 [0114.022] CertFreeCertificateContext (pCertContext=0x1003518) returned 1 [0114.041] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0xfcfef0 [0114.091] CertAddCRLLinkToStore (in: hCertStore=0xfcfef0, pCrlContext=0x10035b8, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0114.093] CertAddCRLLinkToStore (in: hCertStore=0xfcfef0, pCrlContext=0x1003568, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0114.093] CertAddCRLLinkToStore (in: hCertStore=0xfcfef0, pCrlContext=0x1003518, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0114.094] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x57c29b8 [0114.101] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x1003518, pTime=0xb3e8a8, hAdditionalStore=0xfcfef0, pChainPara=0xb3e7e8, dwFlags=0x0, pvReserved=0x0, ppChainContext=0xb3e7dc | out: ppChainContext=0xb3e7dc) returned 1 [0114.114] LocalFree (hMem=0x57c29b8) returned 0x0 [0114.115] CertDuplicateCertificateChain (pChainContext=0x57dcf60) returned 0x57dcf60 [0114.115] CertDuplicateCertificateContext (pCertContext=0x1003518) returned 0x1003518 [0114.116] CertDuplicateCertificateContext (pCertContext=0x1003838) returned 0x1003838 [0114.116] CertDuplicateCertificateContext (pCertContext=0x1003ce8) returned 0x1003ce8 [0114.116] CertFreeCertificateChain (pChainContext=0x57dcf60) [0114.116] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x57dcf60, pPolicyPara=0xb3e988, pPolicyStatus=0xb3e974 | out: pPolicyStatus=0xb3e974) returned 1 [0114.117] SetLastError (dwErrCode=0x0) [0114.119] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x57dcf60, pPolicyPara=0xb3e9e8, pPolicyStatus=0xb3e99c | out: pPolicyStatus=0xb3e99c) returned 1 [0114.126] CertFreeCertificateChain (pChainContext=0x57dcf60) [0114.126] CertFreeCertificateContext (pCertContext=0x1003518) returned 1 [0114.148] CoTaskMemAlloc (cb=0x20c) returned 0x57cd478 [0114.148] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x57cd478, nSize=0x104 | out: lpBuffer="Ⴔ皿궙駞က") returned 0x0 [0114.148] CoTaskMemFree (pv=0x57cd478) [0114.149] CoTaskMemAlloc (cb=0x20c) returned 0x57ce390 [0114.149] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x57ce390, nSize=0x104 | out: lpBuffer="Ⴔ皿궙駞က") returned 0x0 [0114.149] CoTaskMemFree (pv=0x57ce390) [0114.149] CoTaskMemAlloc (cb=0x20c) returned 0x57cd028 [0114.149] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x57cd028, nSize=0x104 | out: lpBuffer="") returned 0x0 [0114.149] CoTaskMemFree (pv=0x57cd028) [0114.149] CoTaskMemAlloc (cb=0x20c) returned 0x57cd6a0 [0114.149] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x57cd6a0, nSize=0x104 | out: lpBuffer="") returned 0x0 [0114.149] CoTaskMemFree (pv=0x57cd6a0) [0114.151] EncryptMessage (in: phContext=0x2aa6bc0, fQOP=0x0, pMessage=0x2ab0ed0, MessageSeqNo=0x0 | out: pMessage=0x2ab0ed0) returned 0x0 [0114.161] send (s=0x644, buf=0x2aaf9a8*, len=154, flags=0) returned 154 [0114.163] setsockopt (s=0x644, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0114.166] recv (in: s=0x644, buf=0x2abd1e0, len=5, flags=0 | out: buf=0x2abd1e0*) returned 5 [0114.321] recv (in: s=0x644, buf=0x2abd1e5, len=800, flags=0 | out: buf=0x2abd1e5*) returned 800 [0114.321] DecryptMessage (in: phContext=0x2aa6bc0, pMessage=0x2ac12a0, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2ac12a0, pfQOP=0x0) returned 0x0 [0114.604] QueryPerformanceCounter (in: lpPerformanceCount=0xb3f294 | out: lpPerformanceCount=0xb3f294*=20988476798) returned 1 [0114.635] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0c0*=0x55c, lpdwindex=0xb3eedc | out: lpdwindex=0xb3eedc) returned 0x80010115 [0114.637] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0a0*=0x54c, lpdwindex=0xb3eebc | out: lpdwindex=0xb3eebc) returned 0x80010115 [0114.638] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0a0*=0x554, lpdwindex=0xb3eebc | out: lpdwindex=0xb3eebc) returned 0x80010115 [0114.638] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0f4*=0x57c, lpdwindex=0xb3ef14 | out: lpdwindex=0xb3ef14) returned 0x80010115 [0114.639] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0f4*=0x584, lpdwindex=0xb3ef14 | out: lpdwindex=0xb3ef14) returned 0x80010115 [0114.639] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0xb3f0f4*=0x58c, lpdwindex=0xb3ef14 | out: lpdwindex=0xb3ef14) returned 0x80010115 [0114.639] SetEvent (hEvent=0x4cc) returned 1 [0114.661] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x748 [0114.662] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x750 [0114.662] WSAConnect (in: s=0x748, name=0x2ad6dc4*(sa_family=2, sin_port=0x1bb, sin_addr="145.14.144.249"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0114.808] closesocket (s=0x750) returned 0 [0114.809] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x57c5cf8 [0114.809] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x57c5cf8, dwGroupId=0x0) returned 0x0 [0114.810] LocalFree (hMem=0x57c5cf8) returned 0x0 [0114.810] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x57c5cf8 [0114.810] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x57c5cf8, dwGroupId=0x0) returned 0x0 [0114.810] LocalFree (hMem=0x57c5cf8) returned 0x0 [0114.810] InitializeSecurityContextW (in: phCredential=0xb3ed14, phContext=0x0, pTargetName=0x2ad6e40, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x2ad7c90, pOutput=0x2ad7c28, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3ed0c | out: phNewContext=0x2ad7c90, pOutput=0x2ad7c28, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3ed0c) returned 0x90312 [0114.812] FreeContextBuffer (in: pvContextBuffer=0x101d138 | out: pvContextBuffer=0x101d138) returned 0x0 [0114.812] send (s=0x748, buf=0x2ad7ca4*, len=310, flags=0) returned 310 [0114.813] recv (in: s=0x748, buf=0x2ad7ca4, len=5, flags=0 | out: buf=0x2ad7ca4*) returned 5 [0114.942] recv (in: s=0x748, buf=0x2ad7ca9, len=65, flags=0 | out: buf=0x2ad7ca9*) returned 65 [0114.942] InitializeSecurityContextW (in: phCredential=0xb3ec6c, phContext=0xb3ecfc, pTargetName=0x2ad6e40, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ad7e60, Reserved2=0x0, phNewContext=0x2ad7c90, pOutput=0x2ad7e74, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3ec64 | out: phNewContext=0x2ad7c90, pOutput=0x2ad7e74, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3ec64) returned 0x90312 [0114.943] recv (in: s=0x748, buf=0x2ad7f04, len=5, flags=0 | out: buf=0x2ad7f04*) returned 5 [0114.943] recv (in: s=0x748, buf=0x2ad7f1d, len=3775, flags=0 | out: buf=0x2ad7f1d*) returned 3775 [0114.944] InitializeSecurityContextW (in: phCredential=0xb3ebc8, phContext=0xb3ec58, pTargetName=0x2ad6e40, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ad8e4c, Reserved2=0x0, phNewContext=0x2ad7c90, pOutput=0x2ad8e60, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3ebc0 | out: phNewContext=0x2ad7c90, pOutput=0x2ad8e60, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3ebc0) returned 0x90312 [0114.946] recv (in: s=0x748, buf=0x2ad8ef0, len=5, flags=0 | out: buf=0x2ad8ef0*) returned 5 [0114.946] recv (in: s=0x748, buf=0x2ad8f09, len=298, flags=0 | out: buf=0x2ad8f09*) returned 298 [0114.946] InitializeSecurityContextW (in: phCredential=0xb3eb24, phContext=0xb3ebb4, pTargetName=0x2ad6e40, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ad90a4, Reserved2=0x0, phNewContext=0x2ad7c90, pOutput=0x2ad90b8, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3eb1c | out: phNewContext=0x2ad7c90, pOutput=0x2ad90b8, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3eb1c) returned 0x90312 [0114.947] recv (in: s=0x748, buf=0x2ad9148, len=5, flags=0 | out: buf=0x2ad9148*) returned 5 [0114.947] recv (in: s=0x748, buf=0x2ad9161, len=4, flags=0 | out: buf=0x2ad9161*) returned 4 [0114.947] InitializeSecurityContextW (in: phCredential=0xb3ea80, phContext=0xb3eb10, pTargetName=0x2ad6e40, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ad91d8, Reserved2=0x0, phNewContext=0x2ad7c90, pOutput=0x2ad91ec, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3ea78 | out: phNewContext=0x2ad7c90, pOutput=0x2ad91ec, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3ea78) returned 0x90312 [0114.950] FreeContextBuffer (in: pvContextBuffer=0xfd2868 | out: pvContextBuffer=0xfd2868) returned 0x0 [0114.950] send (s=0x748, buf=0x2ad9268*, len=101, flags=0) returned 101 [0114.950] recv (in: s=0x748, buf=0x2ad9268, len=5, flags=0 | out: buf=0x2ad9268*) returned 5 [0115.075] recv (in: s=0x748, buf=0x2ad92f5, len=186, flags=0 | out: buf=0x2ad92f5*) returned 186 [0115.075] InitializeSecurityContextW (in: phCredential=0xb3e9dc, phContext=0xb3ea6c, pTargetName=0x2ad6e40, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ad9420, Reserved2=0x0, phNewContext=0x2ad7c90, pOutput=0x2ad9434, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3e9d4 | out: phNewContext=0x2ad7c90, pOutput=0x2ad9434, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3e9d4) returned 0x90312 [0115.076] recv (in: s=0x748, buf=0x2ad94c4, len=5, flags=0 | out: buf=0x2ad94c4*) returned 5 [0115.076] recv (in: s=0x748, buf=0x2ad94dd, len=1, flags=0 | out: buf=0x2ad94dd*) returned 1 [0115.076] InitializeSecurityContextW (in: phCredential=0xb3e938, phContext=0xb3e9c8, pTargetName=0x2ad6e40, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ad9550, Reserved2=0x0, phNewContext=0x2ad7c90, pOutput=0x2ad9564, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3e930 | out: phNewContext=0x2ad7c90, pOutput=0x2ad9564, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3e930) returned 0x90312 [0115.077] recv (in: s=0x748, buf=0x2ad95f4, len=5, flags=0 | out: buf=0x2ad95f4*) returned 5 [0115.077] recv (in: s=0x748, buf=0x2ad960d, len=48, flags=0 | out: buf=0x2ad960d*) returned 48 [0115.077] InitializeSecurityContextW (in: phCredential=0xb3e894, phContext=0xb3e924, pTargetName=0x2ad6e40, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x2ad96b0, Reserved2=0x0, phNewContext=0x2ad7c90, pOutput=0x2ad96c4, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3e88c | out: phNewContext=0x2ad7c90, pOutput=0x2ad96c4, pfContextAttr=0x2ad7a90, ptsExpiry=0xb3e88c) returned 0x0 [0115.080] QueryContextAttributesW (in: phContext=0x2ad7c90, ulAttribute=0x4, pBuffer=0x2ad9754 | out: pBuffer=0x2ad9754) returned 0x0 [0115.080] QueryContextAttributesW (in: phContext=0x2ad7c90, ulAttribute=0x5a, pBuffer=0x2ad9790 | out: pBuffer=0x2ad9790) returned 0x0 [0115.080] QueryContextAttributesW (in: phContext=0x2ad7c90, ulAttribute=0x53, pBuffer=0x2ad97dc | out: pBuffer=0x2ad97dc) returned 0x0 [0115.081] CertDuplicateCertificateContext (pCertContext=0xf77e40) returned 0xf77e40 [0115.082] CertDuplicateStore (hCertStore=0x57da0b0) returned 0x57da0b0 [0115.082] CertEnumCertificatesInStore (hCertStore=0x57da0b0, pPrevCertContext=0x0) returned 0x57e9fe0 [0115.082] CertDuplicateCertificateContext (pCertContext=0x57e9fe0) returned 0x57e9fe0 [0115.082] CertEnumCertificatesInStore (hCertStore=0x57da0b0, pPrevCertContext=0x57e9fe0) returned 0xf77800 [0115.082] CertDuplicateCertificateContext (pCertContext=0xf77800) returned 0xf77800 [0115.082] CertEnumCertificatesInStore (hCertStore=0x57da0b0, pPrevCertContext=0xf77800) returned 0xf77e40 [0115.082] CertDuplicateCertificateContext (pCertContext=0xf77e40) returned 0xf77e40 [0115.082] CertEnumCertificatesInStore (hCertStore=0x57da0b0, pPrevCertContext=0xf77e40) returned 0x0 [0115.082] CertCloseStore (hCertStore=0x57da0b0, dwFlags=0x0) returned 1 [0115.082] CertFreeCertificateContext (pCertContext=0xf77e40) returned 1 [0115.083] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x57da380 [0115.083] CertAddCRLLinkToStore (in: hCertStore=0x57da380, pCrlContext=0x57e9fe0, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0115.083] CertAddCRLLinkToStore (in: hCertStore=0x57da380, pCrlContext=0xf77800, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0115.083] CertAddCRLLinkToStore (in: hCertStore=0x57da380, pCrlContext=0xf77e40, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0115.083] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x57ed318 [0115.084] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0xf77e40, pTime=0xb3e8a4, hAdditionalStore=0x57da380, pChainPara=0xb3e7e4, dwFlags=0x0, pvReserved=0x0, ppChainContext=0xb3e7d8 | out: ppChainContext=0xb3e7d8) returned 1 [0115.084] LocalFree (hMem=0x57ed318) returned 0x0 [0115.084] CertDuplicateCertificateChain (pChainContext=0x57ed5b0) returned 0x57ed5b0 [0115.085] CertDuplicateCertificateContext (pCertContext=0xf77e40) returned 0xf77e40 [0115.085] CertDuplicateCertificateContext (pCertContext=0x1003838) returned 0x1003838 [0115.085] CertDuplicateCertificateContext (pCertContext=0x1003ce8) returned 0x1003ce8 [0115.085] CertFreeCertificateChain (pChainContext=0x57ed5b0) [0115.085] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x57ed5b0, pPolicyPara=0xb3e984, pPolicyStatus=0xb3e970 | out: pPolicyStatus=0xb3e970) returned 1 [0115.085] SetLastError (dwErrCode=0x0) [0115.085] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x57ed5b0, pPolicyPara=0xb3e9e4, pPolicyStatus=0xb3e998 | out: pPolicyStatus=0xb3e998) returned 1 [0115.085] CertFreeCertificateChain (pChainContext=0x57ed5b0) [0115.085] CertFreeCertificateContext (pCertContext=0xf77e40) returned 1 [0115.088] EncryptMessage (in: phContext=0x2ad7c90, fQOP=0x0, pMessage=0x2aef398, MessageSeqNo=0x0 | out: pMessage=0x2aef398) returned 0x0 [0115.088] send (s=0x748, buf=0x2aae590*, len=218, flags=0) returned 218 [0115.089] select (in: nfds=0, readfds=0x2aef43c, writefds=0x0, exceptfds=0x0, timeout=0xb3f020*(tv_sec=0, tv_usec=350000) | out: readfds=0x2aef43c, writefds=0x0, exceptfds=0x0) returned 1 [0115.212] setsockopt (s=0x748, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0115.218] recv (in: s=0x748, buf=0x2ab91a8, len=5, flags=0 | out: buf=0x2ab91a8*) returned 5 [0115.219] recv (in: s=0x748, buf=0x2ab91ad, len=48, flags=0 | out: buf=0x2ab91ad*) returned 48 [0115.219] DecryptMessage (in: phContext=0x2ad7c90, pMessage=0x2b2f8e4, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2b2f8e4, pfQOP=0x0) returned 0x0 [0115.219] EncryptMessage (in: phContext=0x2ad7c90, fQOP=0x0, pMessage=0x2b2faf0, MessageSeqNo=0x0 | out: pMessage=0x2b2faf0) returned 0x0 [0115.219] send (s=0x748, buf=0x2aae590*, len=186, flags=0) returned 186 [0115.229] recv (in: s=0x748, buf=0x2ab91a8, len=5, flags=0 | out: buf=0x2ab91a8*) returned 5 [0115.360] recv (in: s=0x748, buf=0x2ab91ad, len=464, flags=0 | out: buf=0x2ab91ad*) returned 464 [0115.360] DecryptMessage (in: phContext=0x2ad7c90, pMessage=0x2b301f8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x2b301f8, pfQOP=0x0) returned 0x0 [0115.379] GetCurrentProcess () returned 0xffffffff [0115.379] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eee4 | out: TokenHandle=0xb3eee4*=0x750) returned 1 [0115.380] GetCurrentProcess () returned 0xffffffff [0115.380] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xb3eef4 | out: TokenHandle=0xb3eef4*=0x754) returned 1 [0115.382] setsockopt (s=0x748, level=65535, optname=4102, optval="ô\x01", optlen=4) returned 0 [0115.382] QueryPerformanceCounter (in: lpPerformanceCount=0xb3f240 | out: lpPerformanceCount=0xb3f240*=21066295024) returned 1 [0115.383] QueryPerformanceCounter (in: lpPerformanceCount=0xb3f208 | out: lpPerformanceCount=0xb3f208*=21066303594) returned 1 [0115.924] QueryPerformanceCounter (in: lpPerformanceCount=0xb3f208 | out: lpPerformanceCount=0xb3f208*=21120450686) returned 1 [0115.924] QueryPerformanceCounter (in: lpPerformanceCount=0xb3f22c | out: lpPerformanceCount=0xb3f22c*=21120493574) returned 1 [0115.925] QueryContextAttributesW (in: phContext=0x2ad7c90, ulAttribute=0x1a, pBuffer=0xb3f1b4 | out: pBuffer=0xb3f1b4) returned 0x0 [0116.001] DeleteSecurityContext (phContext=0x2ad7c90) returned 0x0 [0116.006] shutdown (s=0x748, how=2) returned 0 [0116.009] setsockopt (s=0x748, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0116.009] closesocket (s=0x748) returned 0 [0116.668] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0xb3f170 | out: lpclsid=0xb3f170*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0117.529] CoGetClassObject (in: rclsid=0x57c5df4*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xb3ed98 | out: ppv=0xb3ed98*=0xc704a0) returned 0x0 [0119.142] WshShell:IUnknown:QueryInterface (in: This=0xc704a0, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0xb3efb4 | out: ppvObject=0xb3efb4*=0x0) returned 0x80004002 [0119.142] WshShell:IClassFactory:CreateInstance (in: This=0xc704a0, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3efc0 | out: ppvObject=0xb3efc0*=0xc704cc) returned 0x0 [0119.142] WshShell:IUnknown:Release (This=0xc704a0) returned 0x0 [0119.142] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3ebe4 | out: ppvObject=0xb3ebe4*=0xc704cc) returned 0x0 [0119.143] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0xb3eba0 | out: ppvObject=0xb3eba0*=0x0) returned 0x80004002 [0119.143] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73bf03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0xb3e9bc | out: ppvObject=0xb3e9bc*=0xc704bc) returned 0x0 [0119.143] WshShell:IProvideClassInfo:GetClassInfo (in: This=0xc704bc, ppTI=0xb3e9c4 | out: ppTI=0xb3e9c4*=0x57f0198) returned 0x0 [0119.168] ITypeInfo:RemoteGetTypeAttr (in: This=0x57f0198, ppTypeAttr=0xb3e9b8, pDummy=0x86c50f89 | out: ppTypeAttr=0xb3e9b8, pDummy=0x86c50f89) returned 0x0 [0119.168] ITypeInfo:LocalReleaseTypeAttr (This=0x57f0198) returned 0x0 [0119.168] WshShell:IUnknown:Release (This=0xc704bc) returned 0x2 [0119.168] WshShell:IUnknown:Release (This=0x57f0198) returned 0x1 [0119.168] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0xb3e794 | out: ppvObject=0xb3e794*=0x0) returned 0x80004002 [0119.168] WshShell:IUnknown:AddRef (This=0xc704cc) returned 0x3 [0119.168] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0xb3e4f4 | out: ppvObject=0xb3e4f4*=0x0) returned 0x80004002 [0119.168] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0xb3e4a4 | out: ppvObject=0xb3e4a4*=0x0) returned 0x80004002 [0119.168] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3e4b0 | out: ppvObject=0xb3e4b0*=0x0) returned 0x80004002 [0119.168] CoGetContextToken (in: pToken=0xb3e510 | out: pToken=0xb3e510) returned 0x0 [0119.169] IUnknown:QueryInterface (in: This=0xf70050, riid=0x73bd5e8c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3e4cc | out: ppvObject=0xb3e4cc*=0xf7005c) returned 0x0 [0119.169] IComThreadingInfo:GetCurrentApartmentType (in: This=0xf7005c, pAptType=0xb3e4fc | out: pAptType=0xb3e4fc*=3) returned 0x0 [0119.169] IUnknown:Release (This=0xf7005c) returned 0x0 [0119.169] CoGetObjectContext (in: riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x57c9244 | out: ppv=0x57c9244*=0xf70050) returned 0x0 [0119.170] CoGetContextToken (in: pToken=0xb3e918 | out: pToken=0xb3e918) returned 0x0 [0119.170] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3e9a4 | out: ppvObject=0xb3e9a4*=0x0) returned 0x80004002 [0119.170] WshShell:IUnknown:Release (This=0xc704cc) returned 0x2 [0119.170] WshShell:IUnknown:Release (This=0xc704cc) returned 0x1 [0119.225] CoCreateGuid (in: pguid=0xb3f2c8 | out: pguid=0xb3f2c8*(Data1=0x816ef3ee, Data2=0xd423, Data3=0x4062, Data4=([0]=0xb4, [1]=0xa8, [2]=0x41, [3]=0x7, [4]=0xc0, [5]=0xff, [6]=0x21, [7]=0x38))) returned 0x0 [0119.226] CoTaskMemAlloc (cb=0x20c) returned 0x57cd028 [0119.227] SHGetFolderPathW (in: hwnd=0x0, csidl=7, hToken=0x0, dwFlags=0x0, pszPath=0x57cd028 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup") returned 0x0 [0119.230] CoTaskMemFree (pv=0x57cd028) [0119.230] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", nBufferLength=0x105, lpBuffer=0xb3eccc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup", lpFilePart=0x0) returned 0x4d [0119.823] CoGetContextToken (in: pToken=0xb3ed10 | out: pToken=0xb3ed10) returned 0x0 [0119.824] WshShell:IUnknown:QueryInterface (in: This=0xc704cc, riid=0x73c65c2c*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3ed84 | out: ppvObject=0xb3ed84*=0xc704b8) returned 0x0 [0119.824] WshShell:IDispatch:GetIDsOfNames (in: This=0xc704b8, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0xb3ed80*="CreateShortcut", cNames=0x1, lcid=0x409, rgDispId=0xb3ed70 | out: rgDispId=0xb3ed70*=1002) returned 0x0 [0119.825] WshShell:IDispatch:Invoke (in: This=0xc704b8, dispIdMember=1002, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0xb3ef08*(rgvarg=([0]=0xb3ed90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\816ef3ee-d423-4062-b4a8-4107c0ff2138.lnk" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\816ef3ee-d423-4062-b4a8-4107c0ff2138.lnk"), varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0xb3ee98, pExcepInfo=0xb3ec54, puArgErr=0xb3ec9c | out: pDispParams=0xb3ef08*(rgvarg=([0]=0xb3ed90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\816ef3ee-d423-4062-b4a8-4107c0ff2138.lnk", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0xb3ee98*(varType=0x9, wReserved1=0xf5, wReserved2=0x6a18, wReserved3=0x73b1, varVal1=0xc704e8, varVal2=0x0), pExcepInfo=0xb3ec54*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0xb3ec9c*=0x7a01c4) returned 0x0 [0121.466] WshShell:IUnknown:QueryInterface (in: This=0xc704e8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3e7bc | out: ppvObject=0xb3e7bc*=0xc704f8) returned 0x0 [0121.466] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0xb3e778 | out: ppvObject=0xb3e778*=0x0) returned 0x80004002 [0121.466] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73bf03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0xb3e594 | out: ppvObject=0xb3e594*=0xc70508) returned 0x0 [0121.466] WshShell:IProvideClassInfo:GetClassInfo (in: This=0xc70508, ppTI=0xb3e59c | out: ppTI=0xb3e59c*=0x57f02a0) returned 0x0 [0121.468] ITypeInfo:RemoteGetTypeAttr (in: This=0x57f02a0, ppTypeAttr=0xb3e590, pDummy=0x86c503e1 | out: ppTypeAttr=0xb3e590, pDummy=0x86c503e1) returned 0x0 [0121.468] ITypeInfo:LocalReleaseTypeAttr (This=0x57f02a0) returned 0x0 [0121.468] WshShell:IUnknown:Release (This=0xc70508) returned 0x2 [0121.468] WshShell:IUnknown:Release (This=0x57f02a0) returned 0x1 [0121.468] WshShell:IUnknown:QueryInterface (in: This=0xc704e8, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0xb3e36c | out: ppvObject=0xb3e36c*=0x0) returned 0x80004002 [0121.469] WshShell:IUnknown:AddRef (This=0xc704f8) returned 0x3 [0121.469] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0xb3e0cc | out: ppvObject=0xb3e0cc*=0x0) returned 0x80004002 [0121.469] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0xb3e07c | out: ppvObject=0xb3e07c*=0x0) returned 0x80004002 [0121.469] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3e088 | out: ppvObject=0xb3e088*=0x0) returned 0x80004002 [0121.469] CoGetContextToken (in: pToken=0xb3e0e8 | out: pToken=0xb3e0e8) returned 0x0 [0121.469] CoGetContextToken (in: pToken=0xb3e4f0 | out: pToken=0xb3e4f0) returned 0x0 [0121.469] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3e57c | out: ppvObject=0xb3e57c*=0x0) returned 0x80004002 [0121.469] WshShell:IUnknown:Release (This=0xc704f8) returned 0x2 [0121.470] WshShell:IUnknown:Release (This=0xc704b8) returned 0x1 [0121.490] CoGetContextToken (in: pToken=0xb3f0c0 | out: pToken=0xb3f0c0) returned 0x0 [0121.624] CoGetContextToken (in: pToken=0xb3f020 | out: pToken=0xb3f020) returned 0x0 [0121.624] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0xb3f0f0*(Data1=0xb86a98cc, Data2=0xdcc0, Data3=0x3205, Data4=([0]=0x87, [1]=0x77, [2]=0x79, [3]=0x11, [4]=0xa0, [5]=0x7d, [6]=0xaa, [7]=0xaf)), ppvObject=0xb3f0ec | out: ppvObject=0xb3f0ec*=0x0) returned 0x80004002 [0121.948] CoGetContextToken (in: pToken=0xb3ec50 | out: pToken=0xb3ec50) returned 0x0 [0121.948] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73c65c2c*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3ecc4 | out: ppvObject=0xb3ecc4*=0xc704e8) returned 0x0 [0121.948] WshShell:IDispatch:GetIDsOfNames (in: This=0xc704e8, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0xb3ecc0*="TargetPath", cNames=0x1, lcid=0x409, rgDispId=0xb3ecb0 | out: rgDispId=0xb3ecb0*=1005) returned 0x0 [0121.948] WshShell:IDispatch:Invoke (in: This=0xc704e8, dispIdMember=1005, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0xb3ee48*(rgvarg=([0]=0xb3ecd0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", varVal2=0x0)), rgdispidNamedArgs=([0]=0xb3ec80*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0xb3edd8, pExcepInfo=0xb3eb84, puArgErr=0xb3ebcc | out: pDispParams=0xb3ee48*(rgvarg=([0]=0xb3ecd0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", varVal2=0x0)), rgdispidNamedArgs=([0]=0xb3ec80*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0xb3edd8*(varType=0x0, wReserved1=0x72a3, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x72985350), pExcepInfo=0xb3eb84*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0xb3ebcc*=0x57ca328) returned 0x0 [0122.055] WshShell:IUnknown:Release (This=0xc704e8) returned 0x1 [0122.322] CoGetContextToken (in: pToken=0xb3f0c0 | out: pToken=0xb3f0c0) returned 0x0 [0122.322] CoGetContextToken (in: pToken=0xb3f020 | out: pToken=0xb3f020) returned 0x0 [0122.322] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0xb3f0f0*(Data1=0xb86a98cc, Data2=0xdcc0, Data3=0x3205, Data4=([0]=0x87, [1]=0x77, [2]=0x79, [3]=0x11, [4]=0xa0, [5]=0x7d, [6]=0xaa, [7]=0xaf)), ppvObject=0xb3f0ec | out: ppvObject=0xb3f0ec*=0x0) returned 0x80004002 [0122.322] CoGetContextToken (in: pToken=0xb3ec50 | out: pToken=0xb3ec50) returned 0x0 [0122.322] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73c65c2c*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3ecc4 | out: ppvObject=0xb3ecc4*=0xc704e8) returned 0x0 [0122.322] WshShell:IDispatch:GetIDsOfNames (in: This=0xc704e8, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0xb3ecc0*="WorkingDirectory", cNames=0x1, lcid=0x409, rgDispId=0xb3ecb0 | out: rgDispId=0xb3ecb0*=1007) returned 0x0 [0122.323] WshShell:IDispatch:Invoke (in: This=0xc704e8, dispIdMember=1007, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0xb3ee48*(rgvarg=([0]=0xb3ecd0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\FD1HVy\\AppData\\Local", varVal2=0x0)), rgdispidNamedArgs=([0]=0xb3ec80*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0xb3edd8, pExcepInfo=0xb3eb84, puArgErr=0xb3ebcc | out: pDispParams=0xb3ee48*(rgvarg=([0]=0xb3ecd0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\Users\\FD1HVy\\AppData\\Local", varVal2=0x0)), rgdispidNamedArgs=([0]=0xb3ec80*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0xb3edd8*(varType=0x0, wReserved1=0x0, wReserved2=0x4, wReserved3=0x0, varVal1=0x0, varVal2=0x2), pExcepInfo=0xb3eb84*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0xb3ebcc*=0x57ca328) returned 0x0 [0122.323] WshShell:IUnknown:Release (This=0xc704e8) returned 0x1 [0122.323] CoGetContextToken (in: pToken=0xb3f0c0 | out: pToken=0xb3f0c0) returned 0x0 [0122.323] CoGetContextToken (in: pToken=0xb3f020 | out: pToken=0xb3f020) returned 0x0 [0122.323] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0xb3f0f0*(Data1=0xb86a98cc, Data2=0xdcc0, Data3=0x3205, Data4=([0]=0x87, [1]=0x77, [2]=0x79, [3]=0x11, [4]=0xa0, [5]=0x7d, [6]=0xaa, [7]=0xaf)), ppvObject=0xb3f0ec | out: ppvObject=0xb3f0ec*=0x0) returned 0x80004002 [0122.323] CoGetContextToken (in: pToken=0xb3ec50 | out: pToken=0xb3ec50) returned 0x0 [0122.323] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73c65c2c*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3ecc4 | out: ppvObject=0xb3ecc4*=0xc704e8) returned 0x0 [0122.324] WshShell:IDispatch:GetIDsOfNames (in: This=0xc704e8, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0xb3ecc0*="WindowStyle", cNames=0x1, lcid=0x409, rgDispId=0xb3ecb0 | out: rgDispId=0xb3ecb0*=1006) returned 0x0 [0122.324] WshShell:IDispatch:Invoke (in: This=0xc704e8, dispIdMember=1006, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x4, pDispParams=0xb3ee48*(rgvarg=([0]=0xb3ecd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0)), rgdispidNamedArgs=([0]=0xb3ec80*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0xb3edd8, pExcepInfo=0xb3eb84, puArgErr=0xb3ebcc | out: pDispParams=0xb3ee48*(rgvarg=([0]=0xb3ecd0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0)), rgdispidNamedArgs=([0]=0xb3ec80*=-3), cArgs=0x1, cNamedArgs=0x1), pVarResult=0xb3edd8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pExcepInfo=0xb3eb84*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0xb3ebcc*=0x57ca328) returned 0x0 [0122.324] WshShell:IUnknown:Release (This=0xc704e8) returned 0x1 [0122.456] CoGetContextToken (in: pToken=0xb3ed20 | out: pToken=0xb3ed20) returned 0x0 [0122.456] WshShell:IUnknown:QueryInterface (in: This=0xc704f8, riid=0x73c65c2c*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3ed98 | out: ppvObject=0xb3ed98*=0xc704e8) returned 0x0 [0122.457] WshShell:IDispatch:GetIDsOfNames (in: This=0xc704e8, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0xb3eda0*="Save", cNames=0x1, lcid=0x409, rgDispId=0xb3ed90 | out: rgDispId=0xb3ed90*=2001) returned 0x0 [0122.457] WshShell:IDispatch:Invoke (in: This=0xc704e8, dispIdMember=2001, riid=0x73b34ce4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0xb3ef04*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0xb3ec94, puArgErr=0xb3ecdc | out: pDispParams=0xb3ef04*(rgvarg=0x0, rgdispidNamedArgs=0x0, cArgs=0x0, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0xb3ec94*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0xb3ecdc*=0x86c50ab5) returned 0x0 [0122.649] WshShell:IUnknown:Release (This=0xc704e8) returned 0x1 [0122.669] GetLogicalDrives () returned 0x4 [0122.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0122.920] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0122.985] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x100d880 [0122.989] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0122.990] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0122.990] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0122.990] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0122.990] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0122.990] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0122.990] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0122.991] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0122.991] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0122.991] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab460c6f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0122.991] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0122.991] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xaced8ceb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0122.992] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0122.992] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf27c4f16, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf27c4f16, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0122.992] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0122.992] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0122.992] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0122.992] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xacefef79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0122.993] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0122.993] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0122.993] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0122.993] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0122.993] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.994] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0122.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0122.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.107] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0123.107] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x100dc40 [0123.108] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0123.108] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0123.108] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0123.108] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0123.109] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0123.109] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0123.109] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0123.109] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0123.109] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0123.109] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab460c6f, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xaced8ceb, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf27c4f16, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xf27c4f16, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0123.110] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0xacefef79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0123.111] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0123.112] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0123.185] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0123.191] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0123.195] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.229] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0123.229] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.229] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.229] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0123.230] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0123.230] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0123.230] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1 [0123.230] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.230] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 1 [0123.230] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0123.231] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.231] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.231] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0123.231] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.231] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.232] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0123.232] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0123.232] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0123.232] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1 [0123.233] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.233] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 1 [0123.233] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0123.233] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0123.233] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.235] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0123.236] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.236] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.236] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0123.237] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0123.334] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0123.349] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0123.349] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0123.349] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.349] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.350] GetFullPathNameW (in: lpFileName="C:\\Users\\Public", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public", lpFilePart=0x0) returned 0xf [0123.350] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.350] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.350] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0123.353] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.354] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0123.354] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.355] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.356] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.356] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0123.356] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.357] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Videos", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Videos", lpFilePart=0x0) returned 0x16 [0123.357] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.357] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.357] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.358] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.358] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.359] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0123.359] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.360] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.360] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.361] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0123.361] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.361] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Pictures", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Pictures", lpFilePart=0x0) returned 0x18 [0123.361] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.361] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.366] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.366] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.367] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.368] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0123.368] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.369] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.369] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.369] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0123.370] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.370] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Music", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Music", lpFilePart=0x0) returned 0x15 [0123.370] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.370] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.371] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.371] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.371] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.372] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0123.372] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d900 [0123.373] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.373] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.373] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0123.374] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 0 [0123.374] FindClose (in: hFindFile=0x100d900 | out: hFindFile=0x100d900) returned 1 [0123.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.374] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Libraries", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Libraries", lpFilePart=0x0) returned 0x19 [0123.374] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.374] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.375] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.375] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1 [0123.375] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.375] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.380] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0123.380] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.380] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.380] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.381] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0123.381] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.390] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Downloads", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Downloads", lpFilePart=0x0) returned 0x19 [0123.390] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d900 [0123.391] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.391] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.391] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.391] FindClose (in: hFindFile=0x100d900 | out: hFindFile=0x100d900) returned 1 [0123.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.393] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0123.393] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.461] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.461] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.461] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0123.462] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0123.462] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0123.462] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.462] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.463] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents", lpFilePart=0x0) returned 0x19 [0123.464] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.465] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.465] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.465] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0123.466] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0123.466] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0123.466] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0123.466] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.468] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0123.468] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0123.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.653] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0123.653] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0123.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.658] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0123.658] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0123.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.663] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0123.663] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.664] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.664] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1 [0123.664] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.664] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0123.665] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0123.665] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0 [0123.665] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.665] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\Desktop", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\Desktop", lpFilePart=0x0) returned 0x17 [0123.666] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.666] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.666] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1 [0123.666] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.667] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0123.667] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0123.667] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.667] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.670] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\AccountPictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\AccountPictures", lpFilePart=0x0) returned 0x1f [0123.670] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.673] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.673] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.673] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0123.674] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.674] GetFullPathNameW (in: lpFileName="C:\\Users\\Public\\AccountPictures", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Public\\AccountPictures", lpFilePart=0x0) returned 0x1f [0123.674] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.675] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.677] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.677] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.677] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0123.679] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d900 [0123.680] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.871] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0123.871] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0123.871] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0123.871] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0123.871] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x51197f4b, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x51197f4b, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0123.871] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6843f79, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6843f79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe68dc973, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe68dc973, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0123.872] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6c4d382c, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6c4d382c, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0123.873] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0123.874] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0123.874] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0123.874] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe70761d1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe70761d1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0123.874] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0123.874] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0123.874] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0123.875] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0123.879] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6fb7518, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6fb7518, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0123.880] FindNextFileW (in: hFindFile=0x100d900, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.880] FindClose (in: hFindFile=0x100d900 | out: hFindFile=0x100d900) returned 1 [0123.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0123.880] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.880] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.881] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0123.881] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0123.881] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0123.881] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0123.881] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x51197f4b, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x51197f4b, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0123.882] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6843f79, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6843f79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0123.882] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0123.882] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0123.882] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0123.882] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0123.882] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe68dc973, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe68dc973, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0123.883] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0123.883] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0123.883] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x6c4d382c, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6c4d382c, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0123.883] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xa9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0123.883] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0123.883] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0123.884] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0123.884] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0123.884] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0123.884] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0123.885] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe70761d1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe70761d1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0123.885] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0123.885] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0123.885] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0123.885] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0123.885] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0123.886] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0123.886] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0123.886] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6fb7518, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6fb7518, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0123.886] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6fb7518, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6fb7518, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0123.886] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.889] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0123.889] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6fb7518, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6fb7518, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.890] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6fb7518, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6fb7518, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.890] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d176170, ftCreationTime.dwHighDateTime=0x1d5e37d, ftLastAccessTime.dwLowDateTime=0x1fff0700, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0x1fff0700, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cb_sB6qZg", cAlternateFileName="CB_SB6~1")) returned 1 [0123.890] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.890] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4734010, ftCreationTime.dwHighDateTime=0x1d5eff0, ftLastAccessTime.dwLowDateTime=0x4778ed00, ftLastAccessTime.dwHighDateTime=0x1d5e36f, ftLastWriteTime.dwLowDateTime=0x4778ed00, ftLastWriteTime.dwHighDateTime=0x1d5e36f, nFileSizeHigh=0x0, nFileSizeLow=0xd86b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DxrF87P6so.flv", cAlternateFileName="DXRF87~1.FLV")) returned 1 [0123.907] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd77e17d0, ftCreationTime.dwHighDateTime=0x1d5edbb, ftLastAccessTime.dwLowDateTime=0xb74c2770, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0xb74c2770, ftLastWriteTime.dwHighDateTime=0x1d5e35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gygRw1hwwcaIBjP", cAlternateFileName="GYGRW1~1")) returned 1 [0123.907] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3dbac10, ftCreationTime.dwHighDateTime=0x1d5e8a5, ftLastAccessTime.dwLowDateTime=0x37755880, ftLastAccessTime.dwHighDateTime=0x1d5ec25, ftLastWriteTime.dwLowDateTime=0x37755880, ftLastWriteTime.dwHighDateTime=0x1d5ec25, nFileSizeHigh=0x0, nFileSizeLow=0x18e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hTyVdu_.swf", cAlternateFileName="")) returned 1 [0123.907] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf569a0, ftCreationTime.dwHighDateTime=0x1d5eaef, ftLastAccessTime.dwLowDateTime=0x35eeeef0, ftLastAccessTime.dwHighDateTime=0x1d5ee3b, ftLastWriteTime.dwLowDateTime=0x35eeeef0, ftLastWriteTime.dwHighDateTime=0x1d5ee3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRy y7R3", cAlternateFileName="MRYY7R~1")) returned 1 [0123.907] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71daaf00, ftCreationTime.dwHighDateTime=0x1d5e920, ftLastAccessTime.dwLowDateTime=0xd1827ab0, ftLastAccessTime.dwHighDateTime=0x1d5eedd, ftLastWriteTime.dwLowDateTime=0xd1827ab0, ftLastWriteTime.dwHighDateTime=0x1d5eedd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="odZTK", cAlternateFileName="")) returned 1 [0123.907] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd14f8d70, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x9ca6a7b0, ftLastAccessTime.dwHighDateTime=0x1d5e511, ftLastWriteTime.dwLowDateTime=0x9ca6a7b0, ftLastWriteTime.dwHighDateTime=0x1d5e511, nFileSizeHigh=0x0, nFileSizeLow=0x17488, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZACKas8YJTIZxMfKmdU.flv", cAlternateFileName="ZACKAS~1.FLV")) returned 1 [0123.908] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd14f8d70, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x9ca6a7b0, ftLastAccessTime.dwHighDateTime=0x1d5e511, ftLastWriteTime.dwLowDateTime=0x9ca6a7b0, ftLastWriteTime.dwHighDateTime=0x1d5e511, nFileSizeHigh=0x0, nFileSizeLow=0x17488, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZACKas8YJTIZxMfKmdU.flv", cAlternateFileName="ZACKAS~1.FLV")) returned 0 [0123.908] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0123.908] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6fb7518, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6fb7518, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.909] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6fb7518, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6fb7518, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.909] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d176170, ftCreationTime.dwHighDateTime=0x1d5e37d, ftLastAccessTime.dwLowDateTime=0x1fff0700, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0x1fff0700, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cb_sB6qZg", cAlternateFileName="CB_SB6~1")) returned 1 [0123.909] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.909] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4734010, ftCreationTime.dwHighDateTime=0x1d5eff0, ftLastAccessTime.dwLowDateTime=0x4778ed00, ftLastAccessTime.dwHighDateTime=0x1d5e36f, ftLastWriteTime.dwLowDateTime=0x4778ed00, ftLastWriteTime.dwHighDateTime=0x1d5e36f, nFileSizeHigh=0x0, nFileSizeLow=0xd86b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DxrF87P6so.flv", cAlternateFileName="DXRF87~1.FLV")) returned 1 [0123.910] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd77e17d0, ftCreationTime.dwHighDateTime=0x1d5edbb, ftLastAccessTime.dwLowDateTime=0xb74c2770, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0xb74c2770, ftLastWriteTime.dwHighDateTime=0x1d5e35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gygRw1hwwcaIBjP", cAlternateFileName="GYGRW1~1")) returned 1 [0123.910] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3dbac10, ftCreationTime.dwHighDateTime=0x1d5e8a5, ftLastAccessTime.dwLowDateTime=0x37755880, ftLastAccessTime.dwHighDateTime=0x1d5ec25, ftLastWriteTime.dwLowDateTime=0x37755880, ftLastWriteTime.dwHighDateTime=0x1d5ec25, nFileSizeHigh=0x0, nFileSizeLow=0x18e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hTyVdu_.swf", cAlternateFileName="")) returned 1 [0123.910] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf569a0, ftCreationTime.dwHighDateTime=0x1d5eaef, ftLastAccessTime.dwLowDateTime=0x35eeeef0, ftLastAccessTime.dwHighDateTime=0x1d5ee3b, ftLastWriteTime.dwLowDateTime=0x35eeeef0, ftLastWriteTime.dwHighDateTime=0x1d5ee3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MRy y7R3", cAlternateFileName="MRYY7R~1")) returned 1 [0123.910] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71daaf00, ftCreationTime.dwHighDateTime=0x1d5e920, ftLastAccessTime.dwLowDateTime=0xd1827ab0, ftLastAccessTime.dwHighDateTime=0x1d5eedd, ftLastWriteTime.dwLowDateTime=0xd1827ab0, ftLastWriteTime.dwHighDateTime=0x1d5eedd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="odZTK", cAlternateFileName="")) returned 1 [0123.910] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd14f8d70, ftCreationTime.dwHighDateTime=0x1d5e6d2, ftLastAccessTime.dwLowDateTime=0x9ca6a7b0, ftLastAccessTime.dwHighDateTime=0x1d5e511, ftLastWriteTime.dwLowDateTime=0x9ca6a7b0, ftLastWriteTime.dwHighDateTime=0x1d5e511, nFileSizeHigh=0x0, nFileSizeLow=0x17488, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZACKas8YJTIZxMfKmdU.flv", cAlternateFileName="ZACKAS~1.FLV")) returned 1 [0123.910] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.911] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\odZTK", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\odZTK", lpFilePart=0x0) returned 0x1c [0123.913] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\odZTK\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71daaf00, ftCreationTime.dwHighDateTime=0x1d5e920, ftLastAccessTime.dwLowDateTime=0xd1827ab0, ftLastAccessTime.dwHighDateTime=0x1d5eedd, ftLastWriteTime.dwLowDateTime=0xd1827ab0, ftLastWriteTime.dwHighDateTime=0x1d5eedd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.913] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71daaf00, ftCreationTime.dwHighDateTime=0x1d5e920, ftLastAccessTime.dwLowDateTime=0xd1827ab0, ftLastAccessTime.dwHighDateTime=0x1d5eedd, ftLastWriteTime.dwLowDateTime=0xd1827ab0, ftLastWriteTime.dwHighDateTime=0x1d5eedd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4517d80, ftCreationTime.dwHighDateTime=0x1d5e0cb, ftLastAccessTime.dwLowDateTime=0xfb645a00, ftLastAccessTime.dwHighDateTime=0x1d5eeca, ftLastWriteTime.dwLowDateTime=0xfb645a00, ftLastWriteTime.dwHighDateTime=0x1d5eeca, nFileSizeHigh=0x0, nFileSizeLow=0x13e77, dwReserved0=0x0, dwReserved1=0x0, cFileName="5LJy7moGM1dG37i.avi", cAlternateFileName="5LJY7M~1.AVI")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edca790, ftCreationTime.dwHighDateTime=0x1d5ef7e, ftLastAccessTime.dwLowDateTime=0xf72e26a0, ftLastAccessTime.dwHighDateTime=0x1d5ee57, ftLastWriteTime.dwLowDateTime=0xf72e26a0, ftLastWriteTime.dwHighDateTime=0x1d5ee57, nFileSizeHigh=0x0, nFileSizeLow=0x88e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEt9 ZXHvz5kv8rJDZ.mkv", cAlternateFileName="AET9ZX~1.MKV")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d28dba0, ftCreationTime.dwHighDateTime=0x1d5e57c, ftLastAccessTime.dwLowDateTime=0x61df1580, ftLastAccessTime.dwHighDateTime=0x1d5e5bc, ftLastWriteTime.dwLowDateTime=0x61df1580, ftLastWriteTime.dwHighDateTime=0x1d5e5bc, nFileSizeHigh=0x0, nFileSizeLow=0x14639, dwReserved0=0x0, dwReserved1=0x0, cFileName="mS-PE.avi", cAlternateFileName="")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa2328c0, ftCreationTime.dwHighDateTime=0x1d5e7b7, ftLastAccessTime.dwLowDateTime=0x58b0d560, ftLastAccessTime.dwHighDateTime=0x1d5e315, ftLastWriteTime.dwLowDateTime=0x58b0d560, ftLastWriteTime.dwHighDateTime=0x1d5e315, nFileSizeHigh=0x0, nFileSizeLow=0x149c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="vT0SZgTe.mkv", cAlternateFileName="")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73222a0, ftCreationTime.dwHighDateTime=0x1d5e8f7, ftLastAccessTime.dwLowDateTime=0xf9814b50, ftLastAccessTime.dwHighDateTime=0x1d5e257, ftLastWriteTime.dwLowDateTime=0xf9814b50, ftLastWriteTime.dwHighDateTime=0x1d5e257, nFileSizeHigh=0x0, nFileSizeLow=0x2ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYje58NEwD.mkv", cAlternateFileName="VYJE58~1.MKV")) returned 1 [0123.914] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff63b0, ftCreationTime.dwHighDateTime=0x1d5eaa0, ftLastAccessTime.dwLowDateTime=0xd5b90970, ftLastAccessTime.dwHighDateTime=0x1d5f093, ftLastWriteTime.dwLowDateTime=0xd5b90970, ftLastWriteTime.dwHighDateTime=0x1d5f093, nFileSizeHigh=0x0, nFileSizeLow=0xa11, dwReserved0=0x0, dwReserved1=0x0, cFileName="zX_H.avi", cAlternateFileName="")) returned 1 [0123.915] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff63b0, ftCreationTime.dwHighDateTime=0x1d5eaa0, ftLastAccessTime.dwLowDateTime=0xd5b90970, ftLastAccessTime.dwHighDateTime=0x1d5f093, ftLastWriteTime.dwLowDateTime=0xd5b90970, ftLastWriteTime.dwHighDateTime=0x1d5f093, nFileSizeHigh=0x0, nFileSizeLow=0xa11, dwReserved0=0x0, dwReserved1=0x0, cFileName="zX_H.avi", cAlternateFileName="")) returned 0 [0123.915] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\odZTK", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\odZTK", lpFilePart=0x0) returned 0x1c [0123.915] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\odZTK\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71daaf00, ftCreationTime.dwHighDateTime=0x1d5e920, ftLastAccessTime.dwLowDateTime=0xd1827ab0, ftLastAccessTime.dwHighDateTime=0x1d5eedd, ftLastWriteTime.dwLowDateTime=0xd1827ab0, ftLastWriteTime.dwHighDateTime=0x1d5eedd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.915] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71daaf00, ftCreationTime.dwHighDateTime=0x1d5e920, ftLastAccessTime.dwLowDateTime=0xd1827ab0, ftLastAccessTime.dwHighDateTime=0x1d5eedd, ftLastWriteTime.dwLowDateTime=0xd1827ab0, ftLastWriteTime.dwHighDateTime=0x1d5eedd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.915] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4517d80, ftCreationTime.dwHighDateTime=0x1d5e0cb, ftLastAccessTime.dwLowDateTime=0xfb645a00, ftLastAccessTime.dwHighDateTime=0x1d5eeca, ftLastWriteTime.dwLowDateTime=0xfb645a00, ftLastWriteTime.dwHighDateTime=0x1d5eeca, nFileSizeHigh=0x0, nFileSizeLow=0x13e77, dwReserved0=0x0, dwReserved1=0x0, cFileName="5LJy7moGM1dG37i.avi", cAlternateFileName="5LJY7M~1.AVI")) returned 1 [0123.916] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6edca790, ftCreationTime.dwHighDateTime=0x1d5ef7e, ftLastAccessTime.dwLowDateTime=0xf72e26a0, ftLastAccessTime.dwHighDateTime=0x1d5ee57, ftLastWriteTime.dwLowDateTime=0xf72e26a0, ftLastWriteTime.dwHighDateTime=0x1d5ee57, nFileSizeHigh=0x0, nFileSizeLow=0x88e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEt9 ZXHvz5kv8rJDZ.mkv", cAlternateFileName="AET9ZX~1.MKV")) returned 1 [0123.916] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d28dba0, ftCreationTime.dwHighDateTime=0x1d5e57c, ftLastAccessTime.dwLowDateTime=0x61df1580, ftLastAccessTime.dwHighDateTime=0x1d5e5bc, ftLastWriteTime.dwLowDateTime=0x61df1580, ftLastWriteTime.dwHighDateTime=0x1d5e5bc, nFileSizeHigh=0x0, nFileSizeLow=0x14639, dwReserved0=0x0, dwReserved1=0x0, cFileName="mS-PE.avi", cAlternateFileName="")) returned 1 [0123.916] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa2328c0, ftCreationTime.dwHighDateTime=0x1d5e7b7, ftLastAccessTime.dwLowDateTime=0x58b0d560, ftLastAccessTime.dwHighDateTime=0x1d5e315, ftLastWriteTime.dwLowDateTime=0x58b0d560, ftLastWriteTime.dwHighDateTime=0x1d5e315, nFileSizeHigh=0x0, nFileSizeLow=0x149c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="vT0SZgTe.mkv", cAlternateFileName="")) returned 1 [0123.916] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb73222a0, ftCreationTime.dwHighDateTime=0x1d5e8f7, ftLastAccessTime.dwLowDateTime=0xf9814b50, ftLastAccessTime.dwHighDateTime=0x1d5e257, ftLastWriteTime.dwLowDateTime=0xf9814b50, ftLastWriteTime.dwHighDateTime=0x1d5e257, nFileSizeHigh=0x0, nFileSizeLow=0x2ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="VYje58NEwD.mkv", cAlternateFileName="VYJE58~1.MKV")) returned 1 [0123.917] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70ff63b0, ftCreationTime.dwHighDateTime=0x1d5eaa0, ftLastAccessTime.dwLowDateTime=0xd5b90970, ftLastAccessTime.dwHighDateTime=0x1d5f093, ftLastWriteTime.dwLowDateTime=0xd5b90970, ftLastWriteTime.dwHighDateTime=0x1d5f093, nFileSizeHigh=0x0, nFileSizeLow=0xa11, dwReserved0=0x0, dwReserved1=0x0, cFileName="zX_H.avi", cAlternateFileName="")) returned 1 [0123.917] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.917] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\MRy y7R3", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\MRy y7R3", lpFilePart=0x0) returned 0x1f [0123.917] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\MRy y7R3\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf569a0, ftCreationTime.dwHighDateTime=0x1d5eaef, ftLastAccessTime.dwLowDateTime=0x35eeeef0, ftLastAccessTime.dwHighDateTime=0x1d5ee3b, ftLastWriteTime.dwLowDateTime=0x35eeeef0, ftLastWriteTime.dwHighDateTime=0x1d5ee3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.918] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf569a0, ftCreationTime.dwHighDateTime=0x1d5eaef, ftLastAccessTime.dwLowDateTime=0x35eeeef0, ftLastAccessTime.dwHighDateTime=0x1d5ee3b, ftLastWriteTime.dwLowDateTime=0x35eeeef0, ftLastWriteTime.dwHighDateTime=0x1d5ee3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.918] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf95d290, ftCreationTime.dwHighDateTime=0x1d5e132, ftLastAccessTime.dwLowDateTime=0x46ca1560, ftLastAccessTime.dwHighDateTime=0x1d5e32d, ftLastWriteTime.dwLowDateTime=0x46ca1560, ftLastWriteTime.dwHighDateTime=0x1d5e32d, nFileSizeHigh=0x0, nFileSizeLow=0x12429, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ThSOX91tYI.flv", cAlternateFileName="5THSOX~1.FLV")) returned 1 [0123.918] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814da400, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x27673cb0, ftLastAccessTime.dwHighDateTime=0x1d5e635, ftLastWriteTime.dwLowDateTime=0x27673cb0, ftLastWriteTime.dwHighDateTime=0x1d5e635, nFileSizeHigh=0x0, nFileSizeLow=0x59d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d0tJLb-ihnbDV9VEboIy.mp4", cAlternateFileName="D0TJLB~1.MP4")) returned 1 [0123.918] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814da400, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x27673cb0, ftLastAccessTime.dwHighDateTime=0x1d5e635, ftLastWriteTime.dwLowDateTime=0x27673cb0, ftLastWriteTime.dwHighDateTime=0x1d5e635, nFileSizeHigh=0x0, nFileSizeLow=0x59d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d0tJLb-ihnbDV9VEboIy.mp4", cAlternateFileName="D0TJLB~1.MP4")) returned 0 [0123.918] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\MRy y7R3", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\MRy y7R3", lpFilePart=0x0) returned 0x1f [0123.918] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\MRy y7R3\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf569a0, ftCreationTime.dwHighDateTime=0x1d5eaef, ftLastAccessTime.dwLowDateTime=0x35eeeef0, ftLastAccessTime.dwHighDateTime=0x1d5ee3b, ftLastWriteTime.dwLowDateTime=0x35eeeef0, ftLastWriteTime.dwHighDateTime=0x1d5ee3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.919] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf569a0, ftCreationTime.dwHighDateTime=0x1d5eaef, ftLastAccessTime.dwLowDateTime=0x35eeeef0, ftLastAccessTime.dwHighDateTime=0x1d5ee3b, ftLastWriteTime.dwLowDateTime=0x35eeeef0, ftLastWriteTime.dwHighDateTime=0x1d5ee3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.919] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf95d290, ftCreationTime.dwHighDateTime=0x1d5e132, ftLastAccessTime.dwLowDateTime=0x46ca1560, ftLastAccessTime.dwHighDateTime=0x1d5e32d, ftLastWriteTime.dwLowDateTime=0x46ca1560, ftLastWriteTime.dwHighDateTime=0x1d5e32d, nFileSizeHigh=0x0, nFileSizeLow=0x12429, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ThSOX91tYI.flv", cAlternateFileName="5THSOX~1.FLV")) returned 1 [0123.919] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x814da400, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x27673cb0, ftLastAccessTime.dwHighDateTime=0x1d5e635, ftLastWriteTime.dwLowDateTime=0x27673cb0, ftLastWriteTime.dwHighDateTime=0x1d5e635, nFileSizeHigh=0x0, nFileSizeLow=0x59d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="d0tJLb-ihnbDV9VEboIy.mp4", cAlternateFileName="D0TJLB~1.MP4")) returned 1 [0123.919] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.919] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP", lpFilePart=0x0) returned 0x26 [0123.919] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd77e17d0, ftCreationTime.dwHighDateTime=0x1d5edbb, ftLastAccessTime.dwLowDateTime=0xb74c2770, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0xb74c2770, ftLastWriteTime.dwHighDateTime=0x1d5e35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.920] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd77e17d0, ftCreationTime.dwHighDateTime=0x1d5edbb, ftLastAccessTime.dwLowDateTime=0xb74c2770, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0xb74c2770, ftLastWriteTime.dwHighDateTime=0x1d5e35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.920] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdabeabf0, ftCreationTime.dwHighDateTime=0x1d5e1ca, ftLastAccessTime.dwLowDateTime=0x4358b400, ftLastAccessTime.dwHighDateTime=0x1d5e0ca, ftLastWriteTime.dwLowDateTime=0x4358b400, ftLastWriteTime.dwHighDateTime=0x1d5e0ca, nFileSizeHigh=0x0, nFileSizeLow=0x2806, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Ft06.avi", cAlternateFileName="")) returned 1 [0123.920] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7220d90, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0x33aa3320, ftLastAccessTime.dwHighDateTime=0x1d5e116, ftLastWriteTime.dwLowDateTime=0x33aa3320, ftLastWriteTime.dwHighDateTime=0x1d5e116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4lj6-MCU3GMJf9Fy", cAlternateFileName="4LJ6-M~1")) returned 1 [0123.920] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e3f5a30, ftCreationTime.dwHighDateTime=0x1d5e4a3, ftLastAccessTime.dwLowDateTime=0x77c325a0, ftLastAccessTime.dwHighDateTime=0x1d5e506, ftLastWriteTime.dwLowDateTime=0x77c325a0, ftLastWriteTime.dwHighDateTime=0x1d5e506, nFileSizeHigh=0x0, nFileSizeLow=0x34c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="8AnJNb1dHMXyi.flv", cAlternateFileName="8ANJNB~1.FLV")) returned 1 [0123.920] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf5ea470, ftCreationTime.dwHighDateTime=0x1d5e1cb, ftLastAccessTime.dwLowDateTime=0x82bfe4b0, ftLastAccessTime.dwHighDateTime=0x1d5e8e0, ftLastWriteTime.dwLowDateTime=0x82bfe4b0, ftLastWriteTime.dwHighDateTime=0x1d5e8e0, nFileSizeHigh=0x0, nFileSizeLow=0x12563, dwReserved0=0x0, dwReserved1=0x0, cFileName="BdbX94J_Ik.flv", cAlternateFileName="BDBX94~1.FLV")) returned 1 [0123.920] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dce9e00, ftCreationTime.dwHighDateTime=0x1d5e25a, ftLastAccessTime.dwLowDateTime=0x957e5dd0, ftLastAccessTime.dwHighDateTime=0x1d5e4e8, ftLastWriteTime.dwLowDateTime=0x957e5dd0, ftLastWriteTime.dwHighDateTime=0x1d5e4e8, nFileSizeHigh=0x0, nFileSizeLow=0x1841f, dwReserved0=0x0, dwReserved1=0x0, cFileName="o7NFDlf7MSHRWK qrT.mkv", cAlternateFileName="O7NFDL~1.MKV")) returned 1 [0123.921] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd909b0, ftCreationTime.dwHighDateTime=0x1d5e564, ftLastAccessTime.dwLowDateTime=0x5b48c520, ftLastAccessTime.dwHighDateTime=0x1d5eed8, ftLastWriteTime.dwLowDateTime=0x5b48c520, ftLastWriteTime.dwHighDateTime=0x1d5eed8, nFileSizeHigh=0x0, nFileSizeLow=0x8bec, dwReserved0=0x0, dwReserved1=0x0, cFileName="o9f LXY6 Uaq5oR2k.avi", cAlternateFileName="O9FLXY~1.AVI")) returned 1 [0123.921] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28f9be0, ftCreationTime.dwHighDateTime=0x1d5ed45, ftLastAccessTime.dwLowDateTime=0x3128fc50, ftLastAccessTime.dwHighDateTime=0x1d5e15f, ftLastWriteTime.dwLowDateTime=0x3128fc50, ftLastWriteTime.dwHighDateTime=0x1d5e15f, nFileSizeHigh=0x0, nFileSizeLow=0x12acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmqV_dg4PuTsS5vq.mkv", cAlternateFileName="QMQV_D~1.MKV")) returned 1 [0123.921] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc06c90, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xc5b50e10, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0xc5b50e10, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x1399e, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuL50riZiVwMt8.swf", cAlternateFileName="QUL50R~1.SWF")) returned 1 [0123.921] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc06c90, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xc5b50e10, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0xc5b50e10, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x1399e, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuL50riZiVwMt8.swf", cAlternateFileName="QUL50R~1.SWF")) returned 0 [0123.921] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP", lpFilePart=0x0) returned 0x26 [0123.922] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd77e17d0, ftCreationTime.dwHighDateTime=0x1d5edbb, ftLastAccessTime.dwLowDateTime=0xb74c2770, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0xb74c2770, ftLastWriteTime.dwHighDateTime=0x1d5e35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.922] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd77e17d0, ftCreationTime.dwHighDateTime=0x1d5edbb, ftLastAccessTime.dwLowDateTime=0xb74c2770, ftLastAccessTime.dwHighDateTime=0x1d5e35e, ftLastWriteTime.dwLowDateTime=0xb74c2770, ftLastWriteTime.dwHighDateTime=0x1d5e35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.922] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdabeabf0, ftCreationTime.dwHighDateTime=0x1d5e1ca, ftLastAccessTime.dwLowDateTime=0x4358b400, ftLastAccessTime.dwHighDateTime=0x1d5e0ca, ftLastWriteTime.dwLowDateTime=0x4358b400, ftLastWriteTime.dwHighDateTime=0x1d5e0ca, nFileSizeHigh=0x0, nFileSizeLow=0x2806, dwReserved0=0x0, dwReserved1=0x0, cFileName="3Ft06.avi", cAlternateFileName="")) returned 1 [0123.958] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7220d90, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0x33aa3320, ftLastAccessTime.dwHighDateTime=0x1d5e116, ftLastWriteTime.dwLowDateTime=0x33aa3320, ftLastWriteTime.dwHighDateTime=0x1d5e116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4lj6-MCU3GMJf9Fy", cAlternateFileName="4LJ6-M~1")) returned 1 [0123.958] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e3f5a30, ftCreationTime.dwHighDateTime=0x1d5e4a3, ftLastAccessTime.dwLowDateTime=0x77c325a0, ftLastAccessTime.dwHighDateTime=0x1d5e506, ftLastWriteTime.dwLowDateTime=0x77c325a0, ftLastWriteTime.dwHighDateTime=0x1d5e506, nFileSizeHigh=0x0, nFileSizeLow=0x34c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="8AnJNb1dHMXyi.flv", cAlternateFileName="8ANJNB~1.FLV")) returned 1 [0123.958] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf5ea470, ftCreationTime.dwHighDateTime=0x1d5e1cb, ftLastAccessTime.dwLowDateTime=0x82bfe4b0, ftLastAccessTime.dwHighDateTime=0x1d5e8e0, ftLastWriteTime.dwLowDateTime=0x82bfe4b0, ftLastWriteTime.dwHighDateTime=0x1d5e8e0, nFileSizeHigh=0x0, nFileSizeLow=0x12563, dwReserved0=0x0, dwReserved1=0x0, cFileName="BdbX94J_Ik.flv", cAlternateFileName="BDBX94~1.FLV")) returned 1 [0123.958] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dce9e00, ftCreationTime.dwHighDateTime=0x1d5e25a, ftLastAccessTime.dwLowDateTime=0x957e5dd0, ftLastAccessTime.dwHighDateTime=0x1d5e4e8, ftLastWriteTime.dwLowDateTime=0x957e5dd0, ftLastWriteTime.dwHighDateTime=0x1d5e4e8, nFileSizeHigh=0x0, nFileSizeLow=0x1841f, dwReserved0=0x0, dwReserved1=0x0, cFileName="o7NFDlf7MSHRWK qrT.mkv", cAlternateFileName="O7NFDL~1.MKV")) returned 1 [0123.958] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd909b0, ftCreationTime.dwHighDateTime=0x1d5e564, ftLastAccessTime.dwLowDateTime=0x5b48c520, ftLastAccessTime.dwHighDateTime=0x1d5eed8, ftLastWriteTime.dwLowDateTime=0x5b48c520, ftLastWriteTime.dwHighDateTime=0x1d5eed8, nFileSizeHigh=0x0, nFileSizeLow=0x8bec, dwReserved0=0x0, dwReserved1=0x0, cFileName="o9f LXY6 Uaq5oR2k.avi", cAlternateFileName="O9FLXY~1.AVI")) returned 1 [0123.959] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28f9be0, ftCreationTime.dwHighDateTime=0x1d5ed45, ftLastAccessTime.dwLowDateTime=0x3128fc50, ftLastAccessTime.dwHighDateTime=0x1d5e15f, ftLastWriteTime.dwLowDateTime=0x3128fc50, ftLastWriteTime.dwHighDateTime=0x1d5e15f, nFileSizeHigh=0x0, nFileSizeLow=0x12acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmqV_dg4PuTsS5vq.mkv", cAlternateFileName="QMQV_D~1.MKV")) returned 1 [0123.959] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dc06c90, ftCreationTime.dwHighDateTime=0x1d5e71c, ftLastAccessTime.dwLowDateTime=0xc5b50e10, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0xc5b50e10, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x1399e, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuL50riZiVwMt8.swf", cAlternateFileName="QUL50R~1.SWF")) returned 1 [0123.959] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.959] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy", lpFilePart=0x0) returned 0x37 [0123.960] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7220d90, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0x33aa3320, ftLastAccessTime.dwHighDateTime=0x1d5e116, ftLastWriteTime.dwLowDateTime=0x33aa3320, ftLastWriteTime.dwHighDateTime=0x1d5e116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.960] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7220d90, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0x33aa3320, ftLastAccessTime.dwHighDateTime=0x1d5e116, ftLastWriteTime.dwLowDateTime=0x33aa3320, ftLastWriteTime.dwHighDateTime=0x1d5e116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.960] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc06e40f0, ftCreationTime.dwHighDateTime=0x1d5e344, ftLastAccessTime.dwLowDateTime=0x27fc1d80, ftLastAccessTime.dwHighDateTime=0x1d5ede7, ftLastWriteTime.dwLowDateTime=0x27fc1d80, ftLastWriteTime.dwHighDateTime=0x1d5ede7, nFileSizeHigh=0x0, nFileSizeLow=0x8b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="7iVmOPZIL5iwDpLTOH.flv", cAlternateFileName="7IVMOP~1.FLV")) returned 1 [0123.960] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1f7c10, ftCreationTime.dwHighDateTime=0x1d5ec22, ftLastAccessTime.dwLowDateTime=0x1f0ef950, ftLastAccessTime.dwHighDateTime=0x1d5e8b4, ftLastWriteTime.dwLowDateTime=0x1f0ef950, ftLastWriteTime.dwHighDateTime=0x1d5e8b4, nFileSizeHigh=0x0, nFileSizeLow=0x7371, dwReserved0=0x0, dwReserved1=0x0, cFileName="bgt6ZKgwT34MhBC1F.mp4", cAlternateFileName="BGT6ZK~1.MP4")) returned 1 [0123.960] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df990b0, ftCreationTime.dwHighDateTime=0x1d5e675, ftLastAccessTime.dwLowDateTime=0x476720f0, ftLastAccessTime.dwHighDateTime=0x1d5ee6b, ftLastWriteTime.dwLowDateTime=0x476720f0, ftLastWriteTime.dwHighDateTime=0x1d5ee6b, nFileSizeHigh=0x0, nFileSizeLow=0x487f, dwReserved0=0x0, dwReserved1=0x0, cFileName="c4bAw5F5 S9EEt.mp4", cAlternateFileName="C4BAW5~1.MP4")) returned 1 [0123.961] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb22a4650, ftCreationTime.dwHighDateTime=0x1d5ee35, ftLastAccessTime.dwLowDateTime=0xf4014e70, ftLastAccessTime.dwHighDateTime=0x1d5ea2a, ftLastWriteTime.dwLowDateTime=0xf4014e70, ftLastWriteTime.dwHighDateTime=0x1d5ea2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IjgLJW", cAlternateFileName="")) returned 1 [0123.961] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68235780, ftCreationTime.dwHighDateTime=0x1d5ea44, ftLastAccessTime.dwLowDateTime=0x3adf6b0, ftLastAccessTime.dwHighDateTime=0x1d5eaf4, ftLastWriteTime.dwLowDateTime=0x3adf6b0, ftLastWriteTime.dwHighDateTime=0x1d5eaf4, nFileSizeHigh=0x0, nFileSizeLow=0x1779d, dwReserved0=0x0, dwReserved1=0x0, cFileName="n lHxx.flv", cAlternateFileName="NLHXX~1.FLV")) returned 1 [0123.961] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af65b50, ftCreationTime.dwHighDateTime=0x1d5e3e1, ftLastAccessTime.dwLowDateTime=0x33ee9c30, ftLastAccessTime.dwHighDateTime=0x1d5ebf8, ftLastWriteTime.dwLowDateTime=0x33ee9c30, ftLastWriteTime.dwHighDateTime=0x1d5ebf8, nFileSizeHigh=0x0, nFileSizeLow=0x508d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sSSq52belW0plbsI.mp4", cAlternateFileName="SSSQ52~1.MP4")) returned 1 [0123.961] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fef640, ftCreationTime.dwHighDateTime=0x1d5e725, ftLastAccessTime.dwLowDateTime=0x23df1b60, ftLastAccessTime.dwHighDateTime=0x1d5e1d7, ftLastWriteTime.dwLowDateTime=0x23df1b60, ftLastWriteTime.dwHighDateTime=0x1d5e1d7, nFileSizeHigh=0x0, nFileSizeLow=0x16113, dwReserved0=0x0, dwReserved1=0x0, cFileName="zw5CtrH.flv", cAlternateFileName="")) returned 1 [0123.961] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fef640, ftCreationTime.dwHighDateTime=0x1d5e725, ftLastAccessTime.dwLowDateTime=0x23df1b60, ftLastAccessTime.dwHighDateTime=0x1d5e1d7, ftLastWriteTime.dwLowDateTime=0x23df1b60, ftLastWriteTime.dwHighDateTime=0x1d5e1d7, nFileSizeHigh=0x0, nFileSizeLow=0x16113, dwReserved0=0x0, dwReserved1=0x0, cFileName="zw5CtrH.flv", cAlternateFileName="")) returned 0 [0123.961] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy", lpFilePart=0x0) returned 0x37 [0123.962] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7220d90, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0x33aa3320, ftLastAccessTime.dwHighDateTime=0x1d5e116, ftLastWriteTime.dwLowDateTime=0x33aa3320, ftLastWriteTime.dwHighDateTime=0x1d5e116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.962] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7220d90, ftCreationTime.dwHighDateTime=0x1d5e13d, ftLastAccessTime.dwLowDateTime=0x33aa3320, ftLastAccessTime.dwHighDateTime=0x1d5e116, ftLastWriteTime.dwLowDateTime=0x33aa3320, ftLastWriteTime.dwHighDateTime=0x1d5e116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.962] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc06e40f0, ftCreationTime.dwHighDateTime=0x1d5e344, ftLastAccessTime.dwLowDateTime=0x27fc1d80, ftLastAccessTime.dwHighDateTime=0x1d5ede7, ftLastWriteTime.dwLowDateTime=0x27fc1d80, ftLastWriteTime.dwHighDateTime=0x1d5ede7, nFileSizeHigh=0x0, nFileSizeLow=0x8b15, dwReserved0=0x0, dwReserved1=0x0, cFileName="7iVmOPZIL5iwDpLTOH.flv", cAlternateFileName="7IVMOP~1.FLV")) returned 1 [0123.962] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1f7c10, ftCreationTime.dwHighDateTime=0x1d5ec22, ftLastAccessTime.dwLowDateTime=0x1f0ef950, ftLastAccessTime.dwHighDateTime=0x1d5e8b4, ftLastWriteTime.dwLowDateTime=0x1f0ef950, ftLastWriteTime.dwHighDateTime=0x1d5e8b4, nFileSizeHigh=0x0, nFileSizeLow=0x7371, dwReserved0=0x0, dwReserved1=0x0, cFileName="bgt6ZKgwT34MhBC1F.mp4", cAlternateFileName="BGT6ZK~1.MP4")) returned 1 [0123.962] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df990b0, ftCreationTime.dwHighDateTime=0x1d5e675, ftLastAccessTime.dwLowDateTime=0x476720f0, ftLastAccessTime.dwHighDateTime=0x1d5ee6b, ftLastWriteTime.dwLowDateTime=0x476720f0, ftLastWriteTime.dwHighDateTime=0x1d5ee6b, nFileSizeHigh=0x0, nFileSizeLow=0x487f, dwReserved0=0x0, dwReserved1=0x0, cFileName="c4bAw5F5 S9EEt.mp4", cAlternateFileName="C4BAW5~1.MP4")) returned 1 [0123.962] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb22a4650, ftCreationTime.dwHighDateTime=0x1d5ee35, ftLastAccessTime.dwLowDateTime=0xf4014e70, ftLastAccessTime.dwHighDateTime=0x1d5ea2a, ftLastWriteTime.dwLowDateTime=0xf4014e70, ftLastWriteTime.dwHighDateTime=0x1d5ea2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IjgLJW", cAlternateFileName="")) returned 1 [0123.963] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68235780, ftCreationTime.dwHighDateTime=0x1d5ea44, ftLastAccessTime.dwLowDateTime=0x3adf6b0, ftLastAccessTime.dwHighDateTime=0x1d5eaf4, ftLastWriteTime.dwLowDateTime=0x3adf6b0, ftLastWriteTime.dwHighDateTime=0x1d5eaf4, nFileSizeHigh=0x0, nFileSizeLow=0x1779d, dwReserved0=0x0, dwReserved1=0x0, cFileName="n lHxx.flv", cAlternateFileName="NLHXX~1.FLV")) returned 1 [0123.963] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7af65b50, ftCreationTime.dwHighDateTime=0x1d5e3e1, ftLastAccessTime.dwLowDateTime=0x33ee9c30, ftLastAccessTime.dwHighDateTime=0x1d5ebf8, ftLastWriteTime.dwLowDateTime=0x33ee9c30, ftLastWriteTime.dwHighDateTime=0x1d5ebf8, nFileSizeHigh=0x0, nFileSizeLow=0x508d, dwReserved0=0x0, dwReserved1=0x0, cFileName="sSSq52belW0plbsI.mp4", cAlternateFileName="SSSQ52~1.MP4")) returned 1 [0123.963] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86fef640, ftCreationTime.dwHighDateTime=0x1d5e725, ftLastAccessTime.dwLowDateTime=0x23df1b60, ftLastAccessTime.dwHighDateTime=0x1d5e1d7, ftLastWriteTime.dwLowDateTime=0x23df1b60, ftLastWriteTime.dwHighDateTime=0x1d5e1d7, nFileSizeHigh=0x0, nFileSizeLow=0x16113, dwReserved0=0x0, dwReserved1=0x0, cFileName="zw5CtrH.flv", cAlternateFileName="")) returned 1 [0123.963] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.963] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.963] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW", lpFilePart=0x0) returned 0x3e [0123.963] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb22a4650, ftCreationTime.dwHighDateTime=0x1d5ee35, ftLastAccessTime.dwLowDateTime=0xf4014e70, ftLastAccessTime.dwHighDateTime=0x1d5ea2a, ftLastWriteTime.dwLowDateTime=0xf4014e70, ftLastWriteTime.dwHighDateTime=0x1d5ea2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.963] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb22a4650, ftCreationTime.dwHighDateTime=0x1d5ee35, ftLastAccessTime.dwLowDateTime=0xf4014e70, ftLastAccessTime.dwHighDateTime=0x1d5ea2a, ftLastWriteTime.dwLowDateTime=0xf4014e70, ftLastWriteTime.dwHighDateTime=0x1d5ea2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff3a4f0, ftCreationTime.dwHighDateTime=0x1d5efc2, ftLastAccessTime.dwLowDateTime=0x6ffa8810, ftLastAccessTime.dwHighDateTime=0x1d5ebb7, ftLastWriteTime.dwLowDateTime=0x6ffa8810, ftLastWriteTime.dwHighDateTime=0x1d5ebb7, nFileSizeHigh=0x0, nFileSizeLow=0x14b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="36Q5ckewQSzYch.mkv", cAlternateFileName="36Q5CK~1.MKV")) returned 1 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5b7c90, ftCreationTime.dwHighDateTime=0x1d5ec11, ftLastAccessTime.dwLowDateTime=0xa875c5b0, ftLastAccessTime.dwHighDateTime=0x1d5eef0, ftLastWriteTime.dwLowDateTime=0xa875c5b0, ftLastWriteTime.dwHighDateTime=0x1d5eef0, nFileSizeHigh=0x0, nFileSizeLow=0x11e11, dwReserved0=0x0, dwReserved1=0x0, cFileName="F4JJGA9km-nmW 1.mp4", cAlternateFileName="F4JJGA~1.MP4")) returned 1 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb90d9e30, ftCreationTime.dwHighDateTime=0x1d5efee, ftLastAccessTime.dwLowDateTime=0x6932c880, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x6932c880, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jlufO", cAlternateFileName="")) returned 1 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0be1540, ftCreationTime.dwHighDateTime=0x1d5e78f, ftLastAccessTime.dwLowDateTime=0x9a4dfb90, ftLastAccessTime.dwHighDateTime=0x1d5e51a, ftLastWriteTime.dwLowDateTime=0x9a4dfb90, ftLastWriteTime.dwHighDateTime=0x1d5e51a, nFileSizeHigh=0x0, nFileSizeLow=0x8c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="rRmLAV.flv", cAlternateFileName="")) returned 1 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68875c80, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0xb3d5dcd0, ftLastAccessTime.dwHighDateTime=0x1d5ebab, ftLastWriteTime.dwLowDateTime=0xb3d5dcd0, ftLastWriteTime.dwHighDateTime=0x1d5ebab, nFileSizeHigh=0x0, nFileSizeLow=0xce60, dwReserved0=0x0, dwReserved1=0x0, cFileName="uMs7JbVQ.flv", cAlternateFileName="")) returned 1 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68875c80, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0xb3d5dcd0, ftLastAccessTime.dwHighDateTime=0x1d5ebab, ftLastWriteTime.dwLowDateTime=0xb3d5dcd0, ftLastWriteTime.dwHighDateTime=0x1d5ebab, nFileSizeHigh=0x0, nFileSizeLow=0xce60, dwReserved0=0x0, dwReserved1=0x0, cFileName="uMs7JbVQ.flv", cAlternateFileName="")) returned 0 [0123.964] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW", lpFilePart=0x0) returned 0x3e [0123.964] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb22a4650, ftCreationTime.dwHighDateTime=0x1d5ee35, ftLastAccessTime.dwLowDateTime=0xf4014e70, ftLastAccessTime.dwHighDateTime=0x1d5ea2a, ftLastWriteTime.dwLowDateTime=0xf4014e70, ftLastWriteTime.dwHighDateTime=0x1d5ea2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb22a4650, ftCreationTime.dwHighDateTime=0x1d5ee35, ftLastAccessTime.dwLowDateTime=0xf4014e70, ftLastAccessTime.dwHighDateTime=0x1d5ea2a, ftLastWriteTime.dwLowDateTime=0xf4014e70, ftLastWriteTime.dwHighDateTime=0x1d5ea2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ff3a4f0, ftCreationTime.dwHighDateTime=0x1d5efc2, ftLastAccessTime.dwLowDateTime=0x6ffa8810, ftLastAccessTime.dwHighDateTime=0x1d5ebb7, ftLastWriteTime.dwLowDateTime=0x6ffa8810, ftLastWriteTime.dwHighDateTime=0x1d5ebb7, nFileSizeHigh=0x0, nFileSizeLow=0x14b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="36Q5ckewQSzYch.mkv", cAlternateFileName="36Q5CK~1.MKV")) returned 1 [0123.964] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c5b7c90, ftCreationTime.dwHighDateTime=0x1d5ec11, ftLastAccessTime.dwLowDateTime=0xa875c5b0, ftLastAccessTime.dwHighDateTime=0x1d5eef0, ftLastWriteTime.dwLowDateTime=0xa875c5b0, ftLastWriteTime.dwHighDateTime=0x1d5eef0, nFileSizeHigh=0x0, nFileSizeLow=0x11e11, dwReserved0=0x0, dwReserved1=0x0, cFileName="F4JJGA9km-nmW 1.mp4", cAlternateFileName="F4JJGA~1.MP4")) returned 1 [0123.965] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb90d9e30, ftCreationTime.dwHighDateTime=0x1d5efee, ftLastAccessTime.dwLowDateTime=0x6932c880, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x6932c880, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jlufO", cAlternateFileName="")) returned 1 [0123.965] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0be1540, ftCreationTime.dwHighDateTime=0x1d5e78f, ftLastAccessTime.dwLowDateTime=0x9a4dfb90, ftLastAccessTime.dwHighDateTime=0x1d5e51a, ftLastWriteTime.dwLowDateTime=0x9a4dfb90, ftLastWriteTime.dwHighDateTime=0x1d5e51a, nFileSizeHigh=0x0, nFileSizeLow=0x8c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="rRmLAV.flv", cAlternateFileName="")) returned 1 [0123.965] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68875c80, ftCreationTime.dwHighDateTime=0x1d5e63e, ftLastAccessTime.dwLowDateTime=0xb3d5dcd0, ftLastAccessTime.dwHighDateTime=0x1d5ebab, ftLastWriteTime.dwLowDateTime=0xb3d5dcd0, ftLastWriteTime.dwHighDateTime=0x1d5ebab, nFileSizeHigh=0x0, nFileSizeLow=0xce60, dwReserved0=0x0, dwReserved1=0x0, cFileName="uMs7JbVQ.flv", cAlternateFileName="")) returned 1 [0123.965] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.965] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.965] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW\\jlufO", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW\\jlufO", lpFilePart=0x0) returned 0x44 [0123.965] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW\\jlufO\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb90d9e30, ftCreationTime.dwHighDateTime=0x1d5efee, ftLastAccessTime.dwLowDateTime=0x6932c880, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x6932c880, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.965] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb90d9e30, ftCreationTime.dwHighDateTime=0x1d5efee, ftLastAccessTime.dwLowDateTime=0x6932c880, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x6932c880, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.966] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22ac9c0, ftCreationTime.dwHighDateTime=0x1d5ef94, ftLastAccessTime.dwLowDateTime=0x80defc0, ftLastAccessTime.dwHighDateTime=0x1d5e4f1, ftLastWriteTime.dwLowDateTime=0x80defc0, ftLastWriteTime.dwHighDateTime=0x1d5e4f1, nFileSizeHigh=0x0, nFileSizeLow=0x1702c, dwReserved0=0x0, dwReserved1=0x0, cFileName="04CrZqQaV1D.mkv", cAlternateFileName="04CRZQ~1.MKV")) returned 1 [0123.966] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2878fc20, ftCreationTime.dwHighDateTime=0x1d5e256, ftLastAccessTime.dwLowDateTime=0xe4abb940, ftLastAccessTime.dwHighDateTime=0x1d5e7d4, ftLastWriteTime.dwLowDateTime=0xe4abb940, ftLastWriteTime.dwHighDateTime=0x1d5e7d4, nFileSizeHigh=0x0, nFileSizeLow=0x4adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9cnlOxm5xp-CtpJz.flv", cAlternateFileName="9CNLOX~1.FLV")) returned 1 [0123.966] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b247ce0, ftCreationTime.dwHighDateTime=0x1d5e6d8, ftLastAccessTime.dwLowDateTime=0x7a59f8b0, ftLastAccessTime.dwHighDateTime=0x1d5ea8e, ftLastWriteTime.dwLowDateTime=0x7a59f8b0, ftLastWriteTime.dwHighDateTime=0x1d5ea8e, nFileSizeHigh=0x0, nFileSizeLow=0xb14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="f7rSbd_W_oPYNLk.swf", cAlternateFileName="F7RSBD~1.SWF")) returned 1 [0123.966] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x355a5da0, ftCreationTime.dwHighDateTime=0x1d5ebaa, ftLastAccessTime.dwLowDateTime=0x8a4b1510, ftLastAccessTime.dwHighDateTime=0x1d5e3e5, ftLastWriteTime.dwLowDateTime=0x8a4b1510, ftLastWriteTime.dwHighDateTime=0x1d5e3e5, nFileSizeHigh=0x0, nFileSizeLow=0x9cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="njnuV21gY.mkv", cAlternateFileName="NJNUV2~1.MKV")) returned 1 [0123.966] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1525c10, ftCreationTime.dwHighDateTime=0x1d5e6eb, ftLastAccessTime.dwLowDateTime=0x2c999c00, ftLastAccessTime.dwHighDateTime=0x1d5ee4b, ftLastWriteTime.dwLowDateTime=0x2c999c00, ftLastWriteTime.dwHighDateTime=0x1d5ee4b, nFileSizeHigh=0x0, nFileSizeLow=0x585b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pHLUstk7RrjUN.mp4", cAlternateFileName="PHLUST~1.MP4")) returned 1 [0123.966] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272644c0, ftCreationTime.dwHighDateTime=0x1d5e4c4, ftLastAccessTime.dwLowDateTime=0x90e97b00, ftLastAccessTime.dwHighDateTime=0x1d5e8db, ftLastWriteTime.dwLowDateTime=0x90e97b00, ftLastWriteTime.dwHighDateTime=0x1d5e8db, nFileSizeHigh=0x0, nFileSizeLow=0x15f73, dwReserved0=0x0, dwReserved1=0x0, cFileName="zpTNOs.avi", cAlternateFileName="")) returned 1 [0123.966] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272644c0, ftCreationTime.dwHighDateTime=0x1d5e4c4, ftLastAccessTime.dwLowDateTime=0x90e97b00, ftLastAccessTime.dwHighDateTime=0x1d5e8db, ftLastWriteTime.dwLowDateTime=0x90e97b00, ftLastWriteTime.dwHighDateTime=0x1d5e8db, nFileSizeHigh=0x0, nFileSizeLow=0x15f73, dwReserved0=0x0, dwReserved1=0x0, cFileName="zpTNOs.avi", cAlternateFileName="")) returned 0 [0123.966] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.966] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW\\jlufO", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW\\jlufO", lpFilePart=0x0) returned 0x44 [0123.966] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\gygRw1hwwcaIBjP\\4lj6-MCU3GMJf9Fy\\IjgLJW\\jlufO\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb90d9e30, ftCreationTime.dwHighDateTime=0x1d5efee, ftLastAccessTime.dwLowDateTime=0x6932c880, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x6932c880, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.966] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb90d9e30, ftCreationTime.dwHighDateTime=0x1d5efee, ftLastAccessTime.dwLowDateTime=0x6932c880, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x6932c880, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc22ac9c0, ftCreationTime.dwHighDateTime=0x1d5ef94, ftLastAccessTime.dwLowDateTime=0x80defc0, ftLastAccessTime.dwHighDateTime=0x1d5e4f1, ftLastWriteTime.dwLowDateTime=0x80defc0, ftLastWriteTime.dwHighDateTime=0x1d5e4f1, nFileSizeHigh=0x0, nFileSizeLow=0x1702c, dwReserved0=0x0, dwReserved1=0x0, cFileName="04CrZqQaV1D.mkv", cAlternateFileName="04CRZQ~1.MKV")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2878fc20, ftCreationTime.dwHighDateTime=0x1d5e256, ftLastAccessTime.dwLowDateTime=0xe4abb940, ftLastAccessTime.dwHighDateTime=0x1d5e7d4, ftLastWriteTime.dwLowDateTime=0xe4abb940, ftLastWriteTime.dwHighDateTime=0x1d5e7d4, nFileSizeHigh=0x0, nFileSizeLow=0x4adb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9cnlOxm5xp-CtpJz.flv", cAlternateFileName="9CNLOX~1.FLV")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b247ce0, ftCreationTime.dwHighDateTime=0x1d5e6d8, ftLastAccessTime.dwLowDateTime=0x7a59f8b0, ftLastAccessTime.dwHighDateTime=0x1d5ea8e, ftLastWriteTime.dwLowDateTime=0x7a59f8b0, ftLastWriteTime.dwHighDateTime=0x1d5ea8e, nFileSizeHigh=0x0, nFileSizeLow=0xb14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="f7rSbd_W_oPYNLk.swf", cAlternateFileName="F7RSBD~1.SWF")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x355a5da0, ftCreationTime.dwHighDateTime=0x1d5ebaa, ftLastAccessTime.dwLowDateTime=0x8a4b1510, ftLastAccessTime.dwHighDateTime=0x1d5e3e5, ftLastWriteTime.dwLowDateTime=0x8a4b1510, ftLastWriteTime.dwHighDateTime=0x1d5e3e5, nFileSizeHigh=0x0, nFileSizeLow=0x9cdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="njnuV21gY.mkv", cAlternateFileName="NJNUV2~1.MKV")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1525c10, ftCreationTime.dwHighDateTime=0x1d5e6eb, ftLastAccessTime.dwLowDateTime=0x2c999c00, ftLastAccessTime.dwHighDateTime=0x1d5ee4b, ftLastWriteTime.dwLowDateTime=0x2c999c00, ftLastWriteTime.dwHighDateTime=0x1d5ee4b, nFileSizeHigh=0x0, nFileSizeLow=0x585b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pHLUstk7RrjUN.mp4", cAlternateFileName="PHLUST~1.MP4")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x272644c0, ftCreationTime.dwHighDateTime=0x1d5e4c4, ftLastAccessTime.dwLowDateTime=0x90e97b00, ftLastAccessTime.dwHighDateTime=0x1d5e8db, ftLastWriteTime.dwLowDateTime=0x90e97b00, ftLastWriteTime.dwHighDateTime=0x1d5e8db, nFileSizeHigh=0x0, nFileSizeLow=0x15f73, dwReserved0=0x0, dwReserved1=0x0, cFileName="zpTNOs.avi", cAlternateFileName="")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.967] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Cb_sB6qZg", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Cb_sB6qZg", lpFilePart=0x0) returned 0x20 [0123.967] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Cb_sB6qZg\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d176170, ftCreationTime.dwHighDateTime=0x1d5e37d, ftLastAccessTime.dwLowDateTime=0x1fff0700, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0x1fff0700, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d176170, ftCreationTime.dwHighDateTime=0x1d5e37d, ftLastAccessTime.dwLowDateTime=0x1fff0700, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0x1fff0700, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59eda0, ftCreationTime.dwHighDateTime=0x1d5e149, ftLastAccessTime.dwLowDateTime=0x2c95bf10, ftLastAccessTime.dwHighDateTime=0x1d5e732, ftLastWriteTime.dwLowDateTime=0x2c95bf10, ftLastWriteTime.dwHighDateTime=0x1d5e732, nFileSizeHigh=0x0, nFileSizeLow=0x6611, dwReserved0=0x0, dwReserved1=0x0, cFileName="racwI6.swf", cAlternateFileName="")) returned 1 [0123.967] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59eda0, ftCreationTime.dwHighDateTime=0x1d5e149, ftLastAccessTime.dwLowDateTime=0x2c95bf10, ftLastAccessTime.dwHighDateTime=0x1d5e732, ftLastWriteTime.dwLowDateTime=0x2c95bf10, ftLastWriteTime.dwHighDateTime=0x1d5e732, nFileSizeHigh=0x0, nFileSizeLow=0x6611, dwReserved0=0x0, dwReserved1=0x0, cFileName="racwI6.swf", cAlternateFileName="")) returned 0 [0123.968] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.968] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Cb_sB6qZg", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Cb_sB6qZg", lpFilePart=0x0) returned 0x20 [0123.968] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Cb_sB6qZg\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d176170, ftCreationTime.dwHighDateTime=0x1d5e37d, ftLastAccessTime.dwLowDateTime=0x1fff0700, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0x1fff0700, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.968] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d176170, ftCreationTime.dwHighDateTime=0x1d5e37d, ftLastAccessTime.dwLowDateTime=0x1fff0700, ftLastAccessTime.dwHighDateTime=0x1d5eb17, ftLastWriteTime.dwLowDateTime=0x1fff0700, ftLastWriteTime.dwHighDateTime=0x1d5eb17, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.968] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59eda0, ftCreationTime.dwHighDateTime=0x1d5e149, ftLastAccessTime.dwLowDateTime=0x2c95bf10, ftLastAccessTime.dwHighDateTime=0x1d5e732, ftLastWriteTime.dwLowDateTime=0x2c95bf10, ftLastWriteTime.dwHighDateTime=0x1d5e732, nFileSizeHigh=0x0, nFileSizeLow=0x6611, dwReserved0=0x0, dwReserved1=0x0, cFileName="racwI6.swf", cAlternateFileName="")) returned 1 [0123.968] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.968] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.968] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Templates", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Templates", lpFilePart=0x0) returned 0x19 [0123.968] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Templates\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0123.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Start Menu", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Start Menu", lpFilePart=0x0) returned 0x1a [0123.971] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Start Menu\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0123.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.973] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\SendTo", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\SendTo", lpFilePart=0x0) returned 0x16 [0123.973] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\SendTo\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0123.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches", lpFilePart=0x0) returned 0x18 [0123.975] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.976] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.976] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.976] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0123.976] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0123.976] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0123.976] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 0 [0123.977] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches", lpFilePart=0x0) returned 0x18 [0123.977] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.977] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.977] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.978] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0123.978] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0123.978] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0123.978] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.978] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games", lpFilePart=0x0) returned 0x1b [0123.980] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.981] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.981] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.981] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0123.981] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.981] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games", lpFilePart=0x0) returned 0x1b [0123.981] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.982] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.982] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.982] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.982] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0123.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Recent", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Recent", lpFilePart=0x0) returned 0x16 [0123.983] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Recent\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0123.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.986] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\PrintHood", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\PrintHood", lpFilePart=0x0) returned 0x19 [0123.986] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\PrintHood\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0123.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0123.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0123.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0123.989] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe70761d1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe70761d1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100dc40 [0123.989] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe70761d1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe70761d1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.989] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18ee6510, ftCreationTime.dwHighDateTime=0x1d5ecb5, ftLastAccessTime.dwLowDateTime=0xa9a48430, ftLastAccessTime.dwHighDateTime=0x1d5e167, ftLastWriteTime.dwLowDateTime=0xa9a48430, ftLastWriteTime.dwHighDateTime=0x1d5e167, nFileSizeHigh=0x0, nFileSizeLow=0xa0e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0NkTTcPD2Gs.gif", cAlternateFileName="0NKTTC~1.GIF")) returned 1 [0123.989] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb9daa30, ftCreationTime.dwHighDateTime=0x1d5f0d2, ftLastAccessTime.dwLowDateTime=0x1810af70, ftLastAccessTime.dwHighDateTime=0x1d5e316, ftLastWriteTime.dwLowDateTime=0x1810af70, ftLastWriteTime.dwHighDateTime=0x1d5e316, nFileSizeHigh=0x0, nFileSizeLow=0x14759, dwReserved0=0x0, dwReserved1=0x0, cFileName="0U9qeqZ.bmp", cAlternateFileName="")) returned 1 [0123.990] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1287c50, ftCreationTime.dwHighDateTime=0x1d5e5cd, ftLastAccessTime.dwLowDateTime=0x39463af0, ftLastAccessTime.dwHighDateTime=0x1d5e7d2, ftLastWriteTime.dwLowDateTime=0x39463af0, ftLastWriteTime.dwHighDateTime=0x1d5e7d2, nFileSizeHigh=0x0, nFileSizeLow=0x527e, dwReserved0=0x0, dwReserved1=0x0, cFileName="1QbrVzP.gif", cAlternateFileName="")) returned 1 [0123.990] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e21d0, ftCreationTime.dwHighDateTime=0x1d5e846, ftLastAccessTime.dwLowDateTime=0x8cb140b0, ftLastAccessTime.dwHighDateTime=0x1d5e316, ftLastWriteTime.dwLowDateTime=0x8cb140b0, ftLastWriteTime.dwHighDateTime=0x1d5e316, nFileSizeHigh=0x0, nFileSizeLow=0x14427, dwReserved0=0x0, dwReserved1=0x0, cFileName="8MpM.gif", cAlternateFileName="")) returned 1 [0123.990] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fc90, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x5063b040, ftLastAccessTime.dwHighDateTime=0x1d5f0f2, ftLastWriteTime.dwLowDateTime=0x5063b040, ftLastWriteTime.dwHighDateTime=0x1d5f0f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bmWV31z5uQ 5", cAlternateFileName="BMWV31~1")) returned 1 [0123.990] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0123.990] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb7d040, ftCreationTime.dwHighDateTime=0x1d5f037, ftLastAccessTime.dwLowDateTime=0x1abd34b0, ftLastAccessTime.dwHighDateTime=0x1d5ee41, ftLastWriteTime.dwLowDateTime=0x1abd34b0, ftLastWriteTime.dwHighDateTime=0x1d5ee41, nFileSizeHigh=0x0, nFileSizeLow=0x18b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYj6oMcAbFElTEuYIb.gif", cAlternateFileName="CYJ6OM~1.GIF")) returned 1 [0123.990] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.991] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbba1aaa0, ftCreationTime.dwHighDateTime=0x1d5e5ea, ftLastAccessTime.dwLowDateTime=0x4e38b300, ftLastAccessTime.dwHighDateTime=0x1d5eb99, ftLastWriteTime.dwLowDateTime=0x4e38b300, ftLastWriteTime.dwHighDateTime=0x1d5eb99, nFileSizeHigh=0x0, nFileSizeLow=0x226c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxC02D.bmp", cAlternateFileName="")) returned 1 [0123.991] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf1c8b0, ftCreationTime.dwHighDateTime=0x1d5efc1, ftLastAccessTime.dwLowDateTime=0x1a9ab0e0, ftLastAccessTime.dwHighDateTime=0x1d5e5e3, ftLastWriteTime.dwLowDateTime=0x1a9ab0e0, ftLastWriteTime.dwHighDateTime=0x1d5e5e3, nFileSizeHigh=0x0, nFileSizeLow=0x1615e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HzkAh7aeX.png", cAlternateFileName="HZKAH7~1.PNG")) returned 1 [0123.991] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1d610, ftCreationTime.dwHighDateTime=0x1d5f009, ftLastAccessTime.dwLowDateTime=0x795091f0, ftLastAccessTime.dwHighDateTime=0x1d5e21d, ftLastWriteTime.dwLowDateTime=0x795091f0, ftLastWriteTime.dwHighDateTime=0x1d5e21d, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="k1zaSpZFmZq4jwr b.bmp", cAlternateFileName="K1ZASP~1.BMP")) returned 1 [0123.991] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61fffcc0, ftCreationTime.dwHighDateTime=0x1d5e484, ftLastAccessTime.dwLowDateTime=0xf322c4d0, ftLastAccessTime.dwHighDateTime=0x1d5e9a7, ftLastWriteTime.dwLowDateTime=0xf322c4d0, ftLastWriteTime.dwHighDateTime=0x1d5e9a7, nFileSizeHigh=0x0, nFileSizeLow=0xfa9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="l7HcwF09tCpP_6VimeqC.jpg", cAlternateFileName="L7HCWF~1.JPG")) returned 1 [0123.991] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf2d68f0, ftCreationTime.dwHighDateTime=0x1d5e4de, ftLastAccessTime.dwLowDateTime=0x1263e6b0, ftLastAccessTime.dwHighDateTime=0x1d5eb6c, ftLastWriteTime.dwLowDateTime=0x1263e6b0, ftLastWriteTime.dwHighDateTime=0x1d5eb6c, nFileSizeHigh=0x0, nFileSizeLow=0x12824, dwReserved0=0x0, dwReserved1=0x0, cFileName="m4jG_OaBVfmRUZ-7b.jpg", cAlternateFileName="M4JG_O~1.JPG")) returned 1 [0123.992] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bd4f50, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x86cfaf90, ftLastAccessTime.dwHighDateTime=0x1d5e83b, ftLastWriteTime.dwLowDateTime=0x86cfaf90, ftLastWriteTime.dwHighDateTime=0x1d5e83b, nFileSizeHigh=0x0, nFileSizeLow=0x13571, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSbMxGzUnWWSJCzs2csc.jpg", cAlternateFileName="PSBMXG~1.JPG")) returned 1 [0123.992] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8382f1a0, ftCreationTime.dwHighDateTime=0x1d5eef6, ftLastAccessTime.dwLowDateTime=0x8007f920, ftLastAccessTime.dwHighDateTime=0x1d5e74a, ftLastWriteTime.dwLowDateTime=0x8007f920, ftLastWriteTime.dwHighDateTime=0x1d5e74a, nFileSizeHigh=0x0, nFileSizeLow=0x9612, dwReserved0=0x0, dwReserved1=0x0, cFileName="qSU_EPgkC.gif", cAlternateFileName="QSU_EP~1.GIF")) returned 1 [0123.992] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ee5910, ftCreationTime.dwHighDateTime=0x1d5eaca, ftLastAccessTime.dwLowDateTime=0xd4f189e0, ftLastAccessTime.dwHighDateTime=0x1d5ed55, ftLastWriteTime.dwLowDateTime=0xd4f189e0, ftLastWriteTime.dwHighDateTime=0x1d5ed55, nFileSizeHigh=0x0, nFileSizeLow=0x49b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="s-M AVO96.jpg", cAlternateFileName="S-MAVO~1.JPG")) returned 1 [0123.992] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0123.992] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cba1930, ftCreationTime.dwHighDateTime=0x1d5e741, ftLastAccessTime.dwLowDateTime=0x11f4a110, ftLastAccessTime.dwHighDateTime=0x1d5ea22, ftLastWriteTime.dwLowDateTime=0x11f4a110, ftLastWriteTime.dwHighDateTime=0x1d5ea22, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="tg9hG.png", cAlternateFileName="")) returned 1 [0123.992] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618edc90, ftCreationTime.dwHighDateTime=0x1d5eaf4, ftLastAccessTime.dwLowDateTime=0x10b1900, ftLastAccessTime.dwHighDateTime=0x1d5edac, ftLastWriteTime.dwLowDateTime=0x10b1900, ftLastWriteTime.dwHighDateTime=0x1d5edac, nFileSizeHigh=0x0, nFileSizeLow=0xcedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="umDqDg7W39zYqe05.gif", cAlternateFileName="UMDQDG~1.GIF")) returned 1 [0123.993] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f04a7f0, ftCreationTime.dwHighDateTime=0x1d5e0e4, ftLastAccessTime.dwLowDateTime=0x583442b0, ftLastAccessTime.dwHighDateTime=0x1d5e262, ftLastWriteTime.dwLowDateTime=0x583442b0, ftLastWriteTime.dwHighDateTime=0x1d5e262, nFileSizeHigh=0x0, nFileSizeLow=0x11f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="vf54Aj8.png", cAlternateFileName="")) returned 1 [0123.993] FindNextFileW (in: hFindFile=0x100dc40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f04a7f0, ftCreationTime.dwHighDateTime=0x1d5e0e4, ftLastAccessTime.dwLowDateTime=0x583442b0, ftLastAccessTime.dwHighDateTime=0x1d5e262, ftLastWriteTime.dwLowDateTime=0x583442b0, ftLastWriteTime.dwHighDateTime=0x1d5e262, nFileSizeHigh=0x0, nFileSizeLow=0x11f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="vf54Aj8.png", cAlternateFileName="")) returned 0 [0123.993] FindClose (in: hFindFile=0x100dc40 | out: hFindFile=0x100dc40) returned 1 [0123.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0123.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0123.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0123.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0123.993] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe70761d1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe70761d1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x100d880 [0123.994] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe70761d1, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe70761d1, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.994] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18ee6510, ftCreationTime.dwHighDateTime=0x1d5ecb5, ftLastAccessTime.dwLowDateTime=0xa9a48430, ftLastAccessTime.dwHighDateTime=0x1d5e167, ftLastWriteTime.dwLowDateTime=0xa9a48430, ftLastWriteTime.dwHighDateTime=0x1d5e167, nFileSizeHigh=0x0, nFileSizeLow=0xa0e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0NkTTcPD2Gs.gif", cAlternateFileName="0NKTTC~1.GIF")) returned 1 [0123.994] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb9daa30, ftCreationTime.dwHighDateTime=0x1d5f0d2, ftLastAccessTime.dwLowDateTime=0x1810af70, ftLastAccessTime.dwHighDateTime=0x1d5e316, ftLastWriteTime.dwLowDateTime=0x1810af70, ftLastWriteTime.dwHighDateTime=0x1d5e316, nFileSizeHigh=0x0, nFileSizeLow=0x14759, dwReserved0=0x0, dwReserved1=0x0, cFileName="0U9qeqZ.bmp", cAlternateFileName="")) returned 1 [0123.994] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1287c50, ftCreationTime.dwHighDateTime=0x1d5e5cd, ftLastAccessTime.dwLowDateTime=0x39463af0, ftLastAccessTime.dwHighDateTime=0x1d5e7d2, ftLastWriteTime.dwLowDateTime=0x39463af0, ftLastWriteTime.dwHighDateTime=0x1d5e7d2, nFileSizeHigh=0x0, nFileSizeLow=0x527e, dwReserved0=0x0, dwReserved1=0x0, cFileName="1QbrVzP.gif", cAlternateFileName="")) returned 1 [0123.994] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e21d0, ftCreationTime.dwHighDateTime=0x1d5e846, ftLastAccessTime.dwLowDateTime=0x8cb140b0, ftLastAccessTime.dwHighDateTime=0x1d5e316, ftLastWriteTime.dwLowDateTime=0x8cb140b0, ftLastWriteTime.dwHighDateTime=0x1d5e316, nFileSizeHigh=0x0, nFileSizeLow=0x14427, dwReserved0=0x0, dwReserved1=0x0, cFileName="8MpM.gif", cAlternateFileName="")) returned 1 [0123.994] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fc90, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x5063b040, ftLastAccessTime.dwHighDateTime=0x1d5f0f2, ftLastWriteTime.dwLowDateTime=0x5063b040, ftLastWriteTime.dwHighDateTime=0x1d5f0f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bmWV31z5uQ 5", cAlternateFileName="BMWV31~1")) returned 1 [0123.994] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0123.995] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cb7d040, ftCreationTime.dwHighDateTime=0x1d5f037, ftLastAccessTime.dwLowDateTime=0x1abd34b0, ftLastAccessTime.dwHighDateTime=0x1d5ee41, ftLastWriteTime.dwLowDateTime=0x1abd34b0, ftLastWriteTime.dwHighDateTime=0x1d5ee41, nFileSizeHigh=0x0, nFileSizeLow=0x18b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYj6oMcAbFElTEuYIb.gif", cAlternateFileName="CYJ6OM~1.GIF")) returned 1 [0123.995] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0123.995] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbba1aaa0, ftCreationTime.dwHighDateTime=0x1d5e5ea, ftLastAccessTime.dwLowDateTime=0x4e38b300, ftLastAccessTime.dwHighDateTime=0x1d5eb99, ftLastWriteTime.dwLowDateTime=0x4e38b300, ftLastWriteTime.dwHighDateTime=0x1d5eb99, nFileSizeHigh=0x0, nFileSizeLow=0x226c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxC02D.bmp", cAlternateFileName="")) returned 1 [0123.995] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedf1c8b0, ftCreationTime.dwHighDateTime=0x1d5efc1, ftLastAccessTime.dwLowDateTime=0x1a9ab0e0, ftLastAccessTime.dwHighDateTime=0x1d5e5e3, ftLastWriteTime.dwLowDateTime=0x1a9ab0e0, ftLastWriteTime.dwHighDateTime=0x1d5e5e3, nFileSizeHigh=0x0, nFileSizeLow=0x1615e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HzkAh7aeX.png", cAlternateFileName="HZKAH7~1.PNG")) returned 1 [0123.995] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1d610, ftCreationTime.dwHighDateTime=0x1d5f009, ftLastAccessTime.dwLowDateTime=0x795091f0, ftLastAccessTime.dwHighDateTime=0x1d5e21d, ftLastWriteTime.dwLowDateTime=0x795091f0, ftLastWriteTime.dwHighDateTime=0x1d5e21d, nFileSizeHigh=0x0, nFileSizeLow=0xd5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="k1zaSpZFmZq4jwr b.bmp", cAlternateFileName="K1ZASP~1.BMP")) returned 1 [0123.996] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61fffcc0, ftCreationTime.dwHighDateTime=0x1d5e484, ftLastAccessTime.dwLowDateTime=0xf322c4d0, ftLastAccessTime.dwHighDateTime=0x1d5e9a7, ftLastWriteTime.dwLowDateTime=0xf322c4d0, ftLastWriteTime.dwHighDateTime=0x1d5e9a7, nFileSizeHigh=0x0, nFileSizeLow=0xfa9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="l7HcwF09tCpP_6VimeqC.jpg", cAlternateFileName="L7HCWF~1.JPG")) returned 1 [0123.996] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf2d68f0, ftCreationTime.dwHighDateTime=0x1d5e4de, ftLastAccessTime.dwLowDateTime=0x1263e6b0, ftLastAccessTime.dwHighDateTime=0x1d5eb6c, ftLastWriteTime.dwLowDateTime=0x1263e6b0, ftLastWriteTime.dwHighDateTime=0x1d5eb6c, nFileSizeHigh=0x0, nFileSizeLow=0x12824, dwReserved0=0x0, dwReserved1=0x0, cFileName="m4jG_OaBVfmRUZ-7b.jpg", cAlternateFileName="M4JG_O~1.JPG")) returned 1 [0123.996] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bd4f50, ftCreationTime.dwHighDateTime=0x1d5ef57, ftLastAccessTime.dwLowDateTime=0x86cfaf90, ftLastAccessTime.dwHighDateTime=0x1d5e83b, ftLastWriteTime.dwLowDateTime=0x86cfaf90, ftLastWriteTime.dwHighDateTime=0x1d5e83b, nFileSizeHigh=0x0, nFileSizeLow=0x13571, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSbMxGzUnWWSJCzs2csc.jpg", cAlternateFileName="PSBMXG~1.JPG")) returned 1 [0123.996] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8382f1a0, ftCreationTime.dwHighDateTime=0x1d5eef6, ftLastAccessTime.dwLowDateTime=0x8007f920, ftLastAccessTime.dwHighDateTime=0x1d5e74a, ftLastWriteTime.dwLowDateTime=0x8007f920, ftLastWriteTime.dwHighDateTime=0x1d5e74a, nFileSizeHigh=0x0, nFileSizeLow=0x9612, dwReserved0=0x0, dwReserved1=0x0, cFileName="qSU_EPgkC.gif", cAlternateFileName="QSU_EP~1.GIF")) returned 1 [0123.996] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89ee5910, ftCreationTime.dwHighDateTime=0x1d5eaca, ftLastAccessTime.dwLowDateTime=0xd4f189e0, ftLastAccessTime.dwHighDateTime=0x1d5ed55, ftLastWriteTime.dwLowDateTime=0xd4f189e0, ftLastWriteTime.dwHighDateTime=0x1d5ed55, nFileSizeHigh=0x0, nFileSizeLow=0x49b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="s-M AVO96.jpg", cAlternateFileName="S-MAVO~1.JPG")) returned 1 [0123.997] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0123.997] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cba1930, ftCreationTime.dwHighDateTime=0x1d5e741, ftLastAccessTime.dwLowDateTime=0x11f4a110, ftLastAccessTime.dwHighDateTime=0x1d5ea22, ftLastWriteTime.dwLowDateTime=0x11f4a110, ftLastWriteTime.dwHighDateTime=0x1d5ea22, nFileSizeHigh=0x0, nFileSizeLow=0x1dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="tg9hG.png", cAlternateFileName="")) returned 1 [0123.997] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x618edc90, ftCreationTime.dwHighDateTime=0x1d5eaf4, ftLastAccessTime.dwLowDateTime=0x10b1900, ftLastAccessTime.dwHighDateTime=0x1d5edac, ftLastWriteTime.dwLowDateTime=0x10b1900, ftLastWriteTime.dwHighDateTime=0x1d5edac, nFileSizeHigh=0x0, nFileSizeLow=0xcedb, dwReserved0=0x0, dwReserved1=0x0, cFileName="umDqDg7W39zYqe05.gif", cAlternateFileName="UMDQDG~1.GIF")) returned 1 [0123.997] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f04a7f0, ftCreationTime.dwHighDateTime=0x1d5e0e4, ftLastAccessTime.dwLowDateTime=0x583442b0, ftLastAccessTime.dwHighDateTime=0x1d5e262, ftLastWriteTime.dwLowDateTime=0x583442b0, ftLastWriteTime.dwHighDateTime=0x1d5e262, nFileSizeHigh=0x0, nFileSizeLow=0x11f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="vf54Aj8.png", cAlternateFileName="")) returned 1 [0123.997] FindNextFileW (in: hFindFile=0x100d880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.997] FindClose (in: hFindFile=0x100d880 | out: hFindFile=0x100d880) returned 1 [0123.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0123.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0124.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif", lpFilePart=0x0) returned 0x28 [0124.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\0nkttcpd2gs.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.100] GetFileType (hFile=0x78c) returned 0x1 [0124.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.100] GetFileType (hFile=0x78c) returned 0x1 [0124.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif.P4WN3D", lpFilePart=0x0) returned 0x2f [0124.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\0nkttcpd2gs.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.101] GetFileType (hFile=0x788) returned 0x1 [0124.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.102] GetFileType (hFile=0x788) returned 0x1 [0124.108] SetEndOfFile (hFile=0x788) returned 1 [0124.114] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xa0e7 [0124.219] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.222] WriteFile (in: hFile=0x788, lpBuffer=0x2b79730*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b79730*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.224] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.224] WriteFile (in: hFile=0x788, lpBuffer=0x2b7a73c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7a73c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.224] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.225] WriteFile (in: hFile=0x788, lpBuffer=0x2b7b748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7b748*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.225] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.225] WriteFile (in: hFile=0x788, lpBuffer=0x2b7c754*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7c754*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.226] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.226] WriteFile (in: hFile=0x788, lpBuffer=0x2b7d760*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7d760*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.226] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.227] WriteFile (in: hFile=0x788, lpBuffer=0x2b7e76c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7e76c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.227] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.227] WriteFile (in: hFile=0x788, lpBuffer=0x2b7f778*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7f778*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.228] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.228] WriteFile (in: hFile=0x788, lpBuffer=0x2b80784*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b80784*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.229] ReadFile (in: hFile=0x78c, lpBuffer=0x2b7336c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b7336c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.405] WriteFile (in: hFile=0x788, lpBuffer=0x2a64d88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a64d88*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.406] ReadFile (in: hFile=0x78c, lpBuffer=0x2a5eff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a5eff0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.406] WriteFile (in: hFile=0x788, lpBuffer=0x2a65d94*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a65d94*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.412] ReadFile (in: hFile=0x78c, lpBuffer=0x2a5eff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a5eff0*, lpNumberOfBytesRead=0xb3f1fc*=0xe7, lpOverlapped=0x0) returned 1 [0124.412] WriteFile (in: hFile=0x788, lpBuffer=0x2a66e8c*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a66e8c*, lpNumberOfBytesWritten=0xb3f1b4*=0xf0, lpOverlapped=0x0) returned 1 [0124.413] CloseHandle (hObject=0x788) returned 1 [0124.416] CloseHandle (hObject=0x78c) returned 1 [0124.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif", lpFilePart=0x0) returned 0x28 [0124.510] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0NkTTcPD2Gs.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\0nkttcpd2gs.gif")) returned 1 [0124.535] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp", lpFilePart=0x0) returned 0x24 [0124.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\0u9qeqz.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.536] GetFileType (hFile=0x78c) returned 0x1 [0124.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.536] GetFileType (hFile=0x78c) returned 0x1 [0124.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp.P4WN3D", lpFilePart=0x0) returned 0x2b [0124.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\0u9qeqz.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.536] GetFileType (hFile=0x788) returned 0x1 [0124.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.536] GetFileType (hFile=0x788) returned 0x1 [0124.536] SetEndOfFile (hFile=0x788) returned 1 [0124.537] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x14759 [0124.537] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.538] WriteFile (in: hFile=0x788, lpBuffer=0x2a6b934*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6b934*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.540] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.540] WriteFile (in: hFile=0x788, lpBuffer=0x2a6c940*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6c940*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.540] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.540] WriteFile (in: hFile=0x788, lpBuffer=0x2a6d94c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6d94c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.541] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.541] WriteFile (in: hFile=0x788, lpBuffer=0x2a6e958*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6e958*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.541] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.541] WriteFile (in: hFile=0x788, lpBuffer=0x2a6f964*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6f964*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.542] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.542] WriteFile (in: hFile=0x788, lpBuffer=0x2a70970*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a70970*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.542] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.543] WriteFile (in: hFile=0x788, lpBuffer=0x2a7197c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7197c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.543] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.543] WriteFile (in: hFile=0x788, lpBuffer=0x2a72988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a72988*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.543] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.544] WriteFile (in: hFile=0x788, lpBuffer=0x2a73994*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a73994*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.544] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.544] WriteFile (in: hFile=0x788, lpBuffer=0x2a749a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a749a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.545] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.546] WriteFile (in: hFile=0x788, lpBuffer=0x2a759ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a759ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.546] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.546] WriteFile (in: hFile=0x788, lpBuffer=0x2a769b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a769b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.546] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.547] WriteFile (in: hFile=0x788, lpBuffer=0x2a779c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a779c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.547] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.547] WriteFile (in: hFile=0x788, lpBuffer=0x2a789d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a789d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.547] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.548] WriteFile (in: hFile=0x788, lpBuffer=0x2a799dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a799dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.548] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.548] WriteFile (in: hFile=0x788, lpBuffer=0x2a7a9e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7a9e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.548] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.549] WriteFile (in: hFile=0x788, lpBuffer=0x2a7b9f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7b9f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.549] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.549] WriteFile (in: hFile=0x788, lpBuffer=0x2a7ca00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7ca00*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.550] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.550] WriteFile (in: hFile=0x788, lpBuffer=0x2a7da0c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7da0c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.550] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.550] WriteFile (in: hFile=0x788, lpBuffer=0x2a7ea18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7ea18*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.551] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6a4e4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6a4e4*, lpNumberOfBytesRead=0xb3f1fc*=0x759, lpOverlapped=0x0) returned 1 [0124.551] WriteFile (in: hFile=0x788, lpBuffer=0x2a80180*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a80180*, lpNumberOfBytesWritten=0xb3f1b4*=0x760, lpOverlapped=0x0) returned 1 [0124.551] CloseHandle (hObject=0x788) returned 1 [0124.554] CloseHandle (hObject=0x78c) returned 1 [0124.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp", lpFilePart=0x0) returned 0x24 [0124.557] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0U9qeqZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\0u9qeqz.bmp")) returned 1 [0124.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif", lpFilePart=0x0) returned 0x24 [0124.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.564] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\1qbrvzp.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.564] GetFileType (hFile=0x78c) returned 0x1 [0124.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.564] GetFileType (hFile=0x78c) returned 0x1 [0124.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif.P4WN3D", lpFilePart=0x0) returned 0x2b [0124.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\1qbrvzp.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.566] GetFileType (hFile=0x788) returned 0x1 [0124.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.566] GetFileType (hFile=0x788) returned 0x1 [0124.566] SetEndOfFile (hFile=0x788) returned 1 [0124.566] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x527e [0124.567] ReadFile (in: hFile=0x78c, lpBuffer=0x2a81ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a81ea8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.568] WriteFile (in: hFile=0x788, lpBuffer=0x2a832f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a832f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.569] ReadFile (in: hFile=0x78c, lpBuffer=0x2a81ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a81ea8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.569] WriteFile (in: hFile=0x788, lpBuffer=0x2a84304*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a84304*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.570] ReadFile (in: hFile=0x78c, lpBuffer=0x2a81ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a81ea8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.570] WriteFile (in: hFile=0x788, lpBuffer=0x2a85310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a85310*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.570] ReadFile (in: hFile=0x78c, lpBuffer=0x2a81ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a81ea8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.570] WriteFile (in: hFile=0x788, lpBuffer=0x2a8631c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8631c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.571] ReadFile (in: hFile=0x78c, lpBuffer=0x2a81ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a81ea8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.571] WriteFile (in: hFile=0x788, lpBuffer=0x2a87328*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a87328*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.571] ReadFile (in: hFile=0x78c, lpBuffer=0x2a81ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a81ea8*, lpNumberOfBytesRead=0xb3f1fc*=0x27e, lpOverlapped=0x0) returned 1 [0124.571] WriteFile (in: hFile=0x788, lpBuffer=0x2a885b0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a885b0*, lpNumberOfBytesWritten=0xb3f1b4*=0x280, lpOverlapped=0x0) returned 1 [0124.572] CloseHandle (hObject=0x788) returned 1 [0124.573] CloseHandle (hObject=0x78c) returned 1 [0124.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif", lpFilePart=0x0) returned 0x24 [0124.575] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\1QbrVzP.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\1qbrvzp.gif")) returned 1 [0124.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif", lpFilePart=0x0) returned 0x21 [0124.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8mpm.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.581] GetFileType (hFile=0x78c) returned 0x1 [0124.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.581] GetFileType (hFile=0x78c) returned 0x1 [0124.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif.P4WN3D", lpFilePart=0x0) returned 0x28 [0124.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\8mpm.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.582] GetFileType (hFile=0x788) returned 0x1 [0124.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.582] GetFileType (hFile=0x788) returned 0x1 [0124.582] SetEndOfFile (hFile=0x788) returned 1 [0124.582] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x14427 [0124.582] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.583] WriteFile (in: hFile=0x788, lpBuffer=0x2a8b708*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8b708*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.585] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.585] WriteFile (in: hFile=0x788, lpBuffer=0x2a8c714*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8c714*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.585] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.586] WriteFile (in: hFile=0x788, lpBuffer=0x2a8d720*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8d720*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.586] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.586] WriteFile (in: hFile=0x788, lpBuffer=0x2a8e72c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8e72c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.586] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.586] WriteFile (in: hFile=0x788, lpBuffer=0x2a8f738*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8f738*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.587] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.587] WriteFile (in: hFile=0x788, lpBuffer=0x2a90744*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a90744*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.587] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.588] WriteFile (in: hFile=0x788, lpBuffer=0x2a91750*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a91750*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.588] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.588] WriteFile (in: hFile=0x788, lpBuffer=0x2a9275c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9275c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.588] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.589] WriteFile (in: hFile=0x788, lpBuffer=0x2a93768*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a93768*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.589] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.589] WriteFile (in: hFile=0x788, lpBuffer=0x2a94774*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a94774*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.589] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.590] WriteFile (in: hFile=0x788, lpBuffer=0x2a95780*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a95780*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.590] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.590] WriteFile (in: hFile=0x788, lpBuffer=0x2a9678c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9678c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.590] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.591] WriteFile (in: hFile=0x788, lpBuffer=0x2a97798*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a97798*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.591] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.591] WriteFile (in: hFile=0x788, lpBuffer=0x2a987a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a987a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.591] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.592] WriteFile (in: hFile=0x788, lpBuffer=0x2a997b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a997b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.592] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.592] WriteFile (in: hFile=0x788, lpBuffer=0x2a9a7bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9a7bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.592] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.593] WriteFile (in: hFile=0x788, lpBuffer=0x2a9b7c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9b7c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.593] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.593] WriteFile (in: hFile=0x788, lpBuffer=0x2a9c7d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9c7d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.593] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.594] WriteFile (in: hFile=0x788, lpBuffer=0x2a9d7e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9d7e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.594] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.594] WriteFile (in: hFile=0x788, lpBuffer=0x2a9e7ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9e7ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.595] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8a2b8*, lpNumberOfBytesRead=0xb3f1fc*=0x427, lpOverlapped=0x0) returned 1 [0124.595] WriteFile (in: hFile=0x788, lpBuffer=0x2a9fc24*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a9fc24*, lpNumberOfBytesWritten=0xb3f1b4*=0x430, lpOverlapped=0x0) returned 1 [0124.595] CloseHandle (hObject=0x788) returned 1 [0124.598] CloseHandle (hObject=0x78c) returned 1 [0124.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif", lpFilePart=0x0) returned 0x21 [0124.601] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\8MpM.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8mpm.gif")) returned 1 [0124.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif", lpFilePart=0x0) returned 0x2f [0124.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\cyj6omcabfelteuyib.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.607] GetFileType (hFile=0x78c) returned 0x1 [0124.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.607] GetFileType (hFile=0x78c) returned 0x1 [0124.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif.P4WN3D", lpFilePart=0x0) returned 0x36 [0124.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.607] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\cyj6omcabfelteuyib.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.607] GetFileType (hFile=0x788) returned 0x1 [0124.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.607] GetFileType (hFile=0x788) returned 0x1 [0124.607] SetEndOfFile (hFile=0x788) returned 1 [0124.608] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x18b8a [0124.608] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.609] WriteFile (in: hFile=0x788, lpBuffer=0x2aa2e04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa2e04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.611] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.612] WriteFile (in: hFile=0x788, lpBuffer=0x2aa3e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa3e10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.612] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.612] WriteFile (in: hFile=0x788, lpBuffer=0x2aa4e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa4e1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.612] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.613] WriteFile (in: hFile=0x788, lpBuffer=0x2aa5e28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa5e28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.613] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.613] WriteFile (in: hFile=0x788, lpBuffer=0x2aa6e34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6e34*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.613] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.614] WriteFile (in: hFile=0x788, lpBuffer=0x2aa7e40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa7e40*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.614] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.614] WriteFile (in: hFile=0x788, lpBuffer=0x2aa8e4c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa8e4c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.614] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.615] WriteFile (in: hFile=0x788, lpBuffer=0x2aa9e58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa9e58*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.615] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.615] WriteFile (in: hFile=0x788, lpBuffer=0x2aaae64*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aaae64*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.615] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.616] WriteFile (in: hFile=0x788, lpBuffer=0x2aabe70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aabe70*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.616] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.616] WriteFile (in: hFile=0x788, lpBuffer=0x2aace7c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aace7c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.616] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.617] WriteFile (in: hFile=0x788, lpBuffer=0x2aade88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aade88*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.617] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.617] WriteFile (in: hFile=0x788, lpBuffer=0x2aaee94*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aaee94*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.617] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.618] WriteFile (in: hFile=0x788, lpBuffer=0x2aafea0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aafea0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.618] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.618] WriteFile (in: hFile=0x788, lpBuffer=0x2ab0eac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab0eac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.618] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.619] WriteFile (in: hFile=0x788, lpBuffer=0x2ab1eb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab1eb8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.619] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.619] WriteFile (in: hFile=0x788, lpBuffer=0x2ab2ec4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab2ec4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.619] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.620] WriteFile (in: hFile=0x788, lpBuffer=0x2ab3ed0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab3ed0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.620] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.620] WriteFile (in: hFile=0x788, lpBuffer=0x2ab4edc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab4edc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.620] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.621] WriteFile (in: hFile=0x788, lpBuffer=0x2ab5ee8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab5ee8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.621] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.621] WriteFile (in: hFile=0x788, lpBuffer=0x2ab6ef4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab6ef4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.621] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.622] WriteFile (in: hFile=0x788, lpBuffer=0x2ab7f00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab7f00*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.622] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.622] WriteFile (in: hFile=0x788, lpBuffer=0x2ab8f0c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab8f0c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.622] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.623] WriteFile (in: hFile=0x788, lpBuffer=0x2ab9f18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab9f18*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.623] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa19b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa19b4*, lpNumberOfBytesRead=0xb3f1fc*=0xb8a, lpOverlapped=0x0) returned 1 [0124.623] WriteFile (in: hFile=0x788, lpBuffer=0x2abbab0*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2abbab0*, lpNumberOfBytesWritten=0xb3f1b4*=0xb90, lpOverlapped=0x0) returned 1 [0124.623] CloseHandle (hObject=0x788) returned 1 [0124.627] CloseHandle (hObject=0x78c) returned 1 [0124.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif", lpFilePart=0x0) returned 0x2f [0124.630] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\CYj6oMcAbFElTEuYIb.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\cyj6omcabfelteuyib.gif")) returned 1 [0124.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp", lpFilePart=0x0) returned 0x23 [0124.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\hxc02d.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.637] GetFileType (hFile=0x78c) returned 0x1 [0124.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.637] GetFileType (hFile=0x78c) returned 0x1 [0124.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp.P4WN3D", lpFilePart=0x0) returned 0x2a [0124.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\hxc02d.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.637] GetFileType (hFile=0x788) returned 0x1 [0124.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.638] GetFileType (hFile=0x788) returned 0x1 [0124.638] SetEndOfFile (hFile=0x788) returned 1 [0124.638] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x226c [0124.638] ReadFile (in: hFile=0x78c, lpBuffer=0x2abd7fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2abd7fc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.639] WriteFile (in: hFile=0x788, lpBuffer=0x2abec4c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abec4c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.641] ReadFile (in: hFile=0x78c, lpBuffer=0x2abd7fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2abd7fc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.641] WriteFile (in: hFile=0x788, lpBuffer=0x2abfc58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abfc58*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.642] ReadFile (in: hFile=0x78c, lpBuffer=0x2abd7fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2abd7fc*, lpNumberOfBytesRead=0xb3f1fc*=0x26c, lpOverlapped=0x0) returned 1 [0124.642] WriteFile (in: hFile=0x788, lpBuffer=0x2ac0ed0*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ac0ed0*, lpNumberOfBytesWritten=0xb3f1b4*=0x270, lpOverlapped=0x0) returned 1 [0124.642] CloseHandle (hObject=0x788) returned 1 [0124.643] CloseHandle (hObject=0x78c) returned 1 [0124.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp", lpFilePart=0x0) returned 0x23 [0124.646] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HxC02D.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\hxc02d.bmp")) returned 1 [0124.650] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png", lpFilePart=0x0) returned 0x26 [0124.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png" (normalized: "c:\\users\\fd1hvy\\pictures\\hzkah7aex.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.651] GetFileType (hFile=0x78c) returned 0x1 [0124.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.651] GetFileType (hFile=0x78c) returned 0x1 [0124.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png.P4WN3D", lpFilePart=0x0) returned 0x2d [0124.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\hzkah7aex.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.651] GetFileType (hFile=0x788) returned 0x1 [0124.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.652] GetFileType (hFile=0x788) returned 0x1 [0124.652] SetEndOfFile (hFile=0x788) returned 1 [0124.652] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1615e [0124.652] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.653] WriteFile (in: hFile=0x788, lpBuffer=0x2ac4054*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac4054*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.660] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.660] WriteFile (in: hFile=0x788, lpBuffer=0x2ac5060*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac5060*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.661] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.661] WriteFile (in: hFile=0x788, lpBuffer=0x2ac606c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac606c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.661] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.661] WriteFile (in: hFile=0x788, lpBuffer=0x2ac7078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac7078*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.662] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.662] WriteFile (in: hFile=0x788, lpBuffer=0x2ac8084*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac8084*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.662] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.662] WriteFile (in: hFile=0x788, lpBuffer=0x2ac9090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac9090*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.663] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.663] WriteFile (in: hFile=0x788, lpBuffer=0x2aca09c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aca09c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.663] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.663] WriteFile (in: hFile=0x788, lpBuffer=0x2acb0a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acb0a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.664] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.664] WriteFile (in: hFile=0x788, lpBuffer=0x2acc0b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acc0b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.664] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.665] WriteFile (in: hFile=0x788, lpBuffer=0x2acd0c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acd0c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.665] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.665] WriteFile (in: hFile=0x788, lpBuffer=0x2ace0cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ace0cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.666] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.666] WriteFile (in: hFile=0x788, lpBuffer=0x2acf0d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acf0d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.666] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.667] WriteFile (in: hFile=0x788, lpBuffer=0x2ad00e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad00e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.667] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.667] WriteFile (in: hFile=0x788, lpBuffer=0x2ad10f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad10f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.667] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.668] WriteFile (in: hFile=0x788, lpBuffer=0x2ad20fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad20fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.668] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.668] WriteFile (in: hFile=0x788, lpBuffer=0x2ad3108*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad3108*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.668] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.669] WriteFile (in: hFile=0x788, lpBuffer=0x2ad4114*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad4114*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.669] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.669] WriteFile (in: hFile=0x788, lpBuffer=0x2ad5120*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad5120*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.669] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.670] WriteFile (in: hFile=0x788, lpBuffer=0x2ad612c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad612c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.670] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.670] WriteFile (in: hFile=0x788, lpBuffer=0x2ad7138*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad7138*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.670] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.671] WriteFile (in: hFile=0x788, lpBuffer=0x2ad8144*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad8144*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.671] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.671] WriteFile (in: hFile=0x788, lpBuffer=0x2ad9150*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad9150*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.671] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac2c04, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac2c04*, lpNumberOfBytesRead=0xb3f1fc*=0x15e, lpOverlapped=0x0) returned 1 [0124.672] WriteFile (in: hFile=0x788, lpBuffer=0x2ada2b8*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ada2b8*, lpNumberOfBytesWritten=0xb3f1b4*=0x160, lpOverlapped=0x0) returned 1 [0124.672] CloseHandle (hObject=0x788) returned 1 [0124.676] CloseHandle (hObject=0x78c) returned 1 [0124.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png", lpFilePart=0x0) returned 0x26 [0124.679] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HzkAh7aeX.png" (normalized: "c:\\users\\fd1hvy\\pictures\\hzkah7aex.png")) returned 1 [0124.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp", lpFilePart=0x0) returned 0x2e [0124.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.696] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\k1zaspzfmzq4jwr b.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.696] GetFileType (hFile=0x78c) returned 0x1 [0124.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.696] GetFileType (hFile=0x78c) returned 0x1 [0124.696] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp.P4WN3D", lpFilePart=0x0) returned 0x35 [0124.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.696] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\k1zaspzfmzq4jwr b.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.697] GetFileType (hFile=0x788) returned 0x1 [0124.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.697] GetFileType (hFile=0x788) returned 0x1 [0124.697] SetEndOfFile (hFile=0x788) returned 1 [0124.697] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xd5d [0124.697] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc048*, lpNumberOfBytesRead=0xb3f1fc*=0xd5d, lpOverlapped=0x0) returned 1 [0124.699] WriteFile (in: hFile=0x788, lpBuffer=0x2ade1f4*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ade1f4*, lpNumberOfBytesWritten=0xb3f1b4*=0xd60, lpOverlapped=0x0) returned 1 [0124.700] CloseHandle (hObject=0x788) returned 1 [0124.706] CloseHandle (hObject=0x78c) returned 1 [0124.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp", lpFilePart=0x0) returned 0x2e [0124.709] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\k1zaSpZFmZq4jwr b.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\k1zaspzfmzq4jwr b.bmp")) returned 1 [0124.718] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg", lpFilePart=0x0) returned 0x31 [0124.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\l7hcwf09tcpp_6vimeqc.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.718] GetFileType (hFile=0x78c) returned 0x1 [0124.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.719] GetFileType (hFile=0x78c) returned 0x1 [0124.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg.P4WN3D", lpFilePart=0x0) returned 0x38 [0124.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.719] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\l7hcwf09tcpp_6vimeqc.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.719] GetFileType (hFile=0x788) returned 0x1 [0124.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.719] GetFileType (hFile=0x788) returned 0x1 [0124.719] SetEndOfFile (hFile=0x788) returned 1 [0124.720] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xfa9c [0124.720] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.721] WriteFile (in: hFile=0x788, lpBuffer=0x2ae1414*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae1414*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.723] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.723] WriteFile (in: hFile=0x788, lpBuffer=0x2ae2420*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae2420*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.723] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.723] WriteFile (in: hFile=0x788, lpBuffer=0x2ae342c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae342c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.724] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.724] WriteFile (in: hFile=0x788, lpBuffer=0x2ae4438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae4438*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.724] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.725] WriteFile (in: hFile=0x788, lpBuffer=0x2ae5444*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae5444*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.725] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.725] WriteFile (in: hFile=0x788, lpBuffer=0x2ae6450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae6450*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.725] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.726] WriteFile (in: hFile=0x788, lpBuffer=0x2ae745c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae745c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.726] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.726] WriteFile (in: hFile=0x788, lpBuffer=0x2ae8468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae8468*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.726] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.727] WriteFile (in: hFile=0x788, lpBuffer=0x2ae9474*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae9474*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.727] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.727] WriteFile (in: hFile=0x788, lpBuffer=0x2aea480*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aea480*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.728] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.728] WriteFile (in: hFile=0x788, lpBuffer=0x2aeb48c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aeb48c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.728] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.729] WriteFile (in: hFile=0x788, lpBuffer=0x2aec498*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aec498*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.729] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.729] WriteFile (in: hFile=0x788, lpBuffer=0x2aed4a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aed4a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.729] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.730] WriteFile (in: hFile=0x788, lpBuffer=0x2aee4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aee4b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.730] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.730] WriteFile (in: hFile=0x788, lpBuffer=0x2aef4bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aef4bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.730] ReadFile (in: hFile=0x78c, lpBuffer=0x2adffc4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adffc4*, lpNumberOfBytesRead=0xb3f1fc*=0xa9c, lpOverlapped=0x0) returned 1 [0124.731] WriteFile (in: hFile=0x788, lpBuffer=0x2af0f64*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2af0f64*, lpNumberOfBytesWritten=0xb3f1b4*=0xaa0, lpOverlapped=0x0) returned 1 [0124.731] CloseHandle (hObject=0x788) returned 1 [0124.737] CloseHandle (hObject=0x78c) returned 1 [0124.740] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg", lpFilePart=0x0) returned 0x31 [0124.740] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\l7HcwF09tCpP_6VimeqC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\l7hcwf09tcpp_6vimeqc.jpg")) returned 1 [0124.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg", lpFilePart=0x0) returned 0x2e [0124.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\m4jg_oabvfmruz-7b.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.747] GetFileType (hFile=0x78c) returned 0x1 [0124.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.747] GetFileType (hFile=0x78c) returned 0x1 [0124.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg.P4WN3D", lpFilePart=0x0) returned 0x35 [0124.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\m4jg_oabvfmruz-7b.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.748] GetFileType (hFile=0x788) returned 0x1 [0124.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.748] GetFileType (hFile=0x788) returned 0x1 [0124.748] SetEndOfFile (hFile=0x788) returned 1 [0124.748] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x12824 [0124.749] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.751] WriteFile (in: hFile=0x788, lpBuffer=0x2af4170*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af4170*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.753] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.753] WriteFile (in: hFile=0x788, lpBuffer=0x2af517c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af517c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.753] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.754] WriteFile (in: hFile=0x788, lpBuffer=0x2af6188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af6188*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.754] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.754] WriteFile (in: hFile=0x788, lpBuffer=0x2af7194*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af7194*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.754] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.755] WriteFile (in: hFile=0x788, lpBuffer=0x2af81a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af81a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.755] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.755] WriteFile (in: hFile=0x788, lpBuffer=0x2af91ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af91ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.755] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.756] WriteFile (in: hFile=0x788, lpBuffer=0x2afa1b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afa1b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.756] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.756] WriteFile (in: hFile=0x788, lpBuffer=0x2afb1c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afb1c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.757] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.757] WriteFile (in: hFile=0x788, lpBuffer=0x2afc1d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afc1d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.757] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.757] WriteFile (in: hFile=0x788, lpBuffer=0x2afd1dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afd1dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.758] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.758] WriteFile (in: hFile=0x788, lpBuffer=0x2afe1e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afe1e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.758] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.759] WriteFile (in: hFile=0x788, lpBuffer=0x2aff1f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aff1f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.759] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.759] WriteFile (in: hFile=0x788, lpBuffer=0x2b00200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b00200*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.759] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.760] WriteFile (in: hFile=0x788, lpBuffer=0x2b0120c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0120c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.760] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.760] WriteFile (in: hFile=0x788, lpBuffer=0x2b02218*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b02218*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.761] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.761] WriteFile (in: hFile=0x788, lpBuffer=0x2b03224*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b03224*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.761] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.761] WriteFile (in: hFile=0x788, lpBuffer=0x2b04230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b04230*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.762] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.762] WriteFile (in: hFile=0x788, lpBuffer=0x2b0523c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0523c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.762] ReadFile (in: hFile=0x78c, lpBuffer=0x2af2d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af2d20*, lpNumberOfBytesRead=0xb3f1fc*=0x824, lpOverlapped=0x0) returned 1 [0124.763] WriteFile (in: hFile=0x788, lpBuffer=0x2b06a74*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b06a74*, lpNumberOfBytesWritten=0xb3f1b4*=0x830, lpOverlapped=0x0) returned 1 [0124.763] CloseHandle (hObject=0x788) returned 1 [0124.769] CloseHandle (hObject=0x78c) returned 1 [0124.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg", lpFilePart=0x0) returned 0x2e [0124.772] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\m4jG_OaBVfmRUZ-7b.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\m4jg_oabvfmruz-7b.jpg")) returned 1 [0124.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg", lpFilePart=0x0) returned 0x31 [0124.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\psbmxgzunwwsjczs2csc.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.779] GetFileType (hFile=0x78c) returned 0x1 [0124.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.779] GetFileType (hFile=0x78c) returned 0x1 [0124.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg.P4WN3D", lpFilePart=0x0) returned 0x38 [0124.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\psbmxgzunwwsjczs2csc.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.780] GetFileType (hFile=0x788) returned 0x1 [0124.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.780] GetFileType (hFile=0x788) returned 0x1 [0124.780] SetEndOfFile (hFile=0x788) returned 1 [0124.780] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x13571 [0124.780] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.782] WriteFile (in: hFile=0x788, lpBuffer=0x2b09c9c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b09c9c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.783] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.783] WriteFile (in: hFile=0x788, lpBuffer=0x2b0aca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0aca8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.784] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.784] WriteFile (in: hFile=0x788, lpBuffer=0x2b0bcb4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0bcb4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.784] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.785] WriteFile (in: hFile=0x788, lpBuffer=0x2b0ccc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0ccc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.785] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.785] WriteFile (in: hFile=0x788, lpBuffer=0x2b0dccc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0dccc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.785] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.786] WriteFile (in: hFile=0x788, lpBuffer=0x2b0ecd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0ecd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.786] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.786] WriteFile (in: hFile=0x788, lpBuffer=0x2b0fce4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0fce4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.786] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.787] WriteFile (in: hFile=0x788, lpBuffer=0x2b10cf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b10cf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.787] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.787] WriteFile (in: hFile=0x788, lpBuffer=0x2b11cfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b11cfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.788] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.788] WriteFile (in: hFile=0x788, lpBuffer=0x2b12d08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b12d08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.788] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.788] WriteFile (in: hFile=0x788, lpBuffer=0x2b13d14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b13d14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.789] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.789] WriteFile (in: hFile=0x788, lpBuffer=0x2b14d20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b14d20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.789] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.790] WriteFile (in: hFile=0x788, lpBuffer=0x2b15d2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b15d2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.790] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.790] WriteFile (in: hFile=0x788, lpBuffer=0x2b16d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b16d38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.790] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.791] WriteFile (in: hFile=0x788, lpBuffer=0x2b17d44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b17d44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.791] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.791] WriteFile (in: hFile=0x788, lpBuffer=0x2b18d50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b18d50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.791] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.792] WriteFile (in: hFile=0x788, lpBuffer=0x2b19d5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b19d5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.792] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.792] WriteFile (in: hFile=0x788, lpBuffer=0x2b1ad68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1ad68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.793] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.793] WriteFile (in: hFile=0x788, lpBuffer=0x2b1bd74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1bd74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.793] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0884c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0884c*, lpNumberOfBytesRead=0xb3f1fc*=0x571, lpOverlapped=0x0) returned 1 [0124.794] WriteFile (in: hFile=0x788, lpBuffer=0x2b1d2fc*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b1d2fc*, lpNumberOfBytesWritten=0xb3f1b4*=0x580, lpOverlapped=0x0) returned 1 [0124.794] CloseHandle (hObject=0x788) returned 1 [0124.816] CloseHandle (hObject=0x78c) returned 1 [0124.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg", lpFilePart=0x0) returned 0x31 [0124.819] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\PSbMxGzUnWWSJCzs2csc.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\psbmxgzunwwsjczs2csc.jpg")) returned 1 [0124.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif", lpFilePart=0x0) returned 0x26 [0124.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\qsu_epgkc.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0124.824] GetFileType (hFile=0x78c) returned 0x1 [0124.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.824] GetFileType (hFile=0x78c) returned 0x1 [0124.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif.P4WN3D", lpFilePart=0x0) returned 0x2d [0124.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0124.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\qsu_epgkc.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0124.825] GetFileType (hFile=0x788) returned 0x1 [0124.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0124.825] GetFileType (hFile=0x788) returned 0x1 [0124.825] SetEndOfFile (hFile=0x788) returned 1 [0124.825] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x9612 [0124.826] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.827] WriteFile (in: hFile=0x788, lpBuffer=0x2b204c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b204c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.828] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.829] WriteFile (in: hFile=0x788, lpBuffer=0x2b214d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b214d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.829] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.829] WriteFile (in: hFile=0x788, lpBuffer=0x2b224dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b224dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.830] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.830] WriteFile (in: hFile=0x788, lpBuffer=0x2b234e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b234e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.830] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.830] WriteFile (in: hFile=0x788, lpBuffer=0x2b244f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b244f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.831] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.831] WriteFile (in: hFile=0x788, lpBuffer=0x2b25500*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b25500*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.831] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.831] WriteFile (in: hFile=0x788, lpBuffer=0x2b2650c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2650c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.832] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.832] WriteFile (in: hFile=0x788, lpBuffer=0x2b27518*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b27518*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.832] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0124.832] WriteFile (in: hFile=0x788, lpBuffer=0x2b28524*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b28524*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0124.833] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f074, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f074*, lpNumberOfBytesRead=0xb3f1fc*=0x612, lpOverlapped=0x0) returned 1 [0124.833] WriteFile (in: hFile=0x788, lpBuffer=0x2b29b4c*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b29b4c*, lpNumberOfBytesWritten=0xb3f1b4*=0x620, lpOverlapped=0x0) returned 1 [0124.833] CloseHandle (hObject=0x788) returned 1 [0124.855] CloseHandle (hObject=0x78c) returned 1 [0124.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif", lpFilePart=0x0) returned 0x26 [0124.970] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\qSU_EPgkC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\qsu_epgkc.gif")) returned 1 [0125.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg", lpFilePart=0x0) returned 0x26 [0125.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.343] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\s-m avo96.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0125.344] GetFileType (hFile=0x78c) returned 0x1 [0125.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.344] GetFileType (hFile=0x78c) returned 0x1 [0125.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg.P4WN3D", lpFilePart=0x0) returned 0x2d [0125.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.345] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\s-m avo96.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0125.346] GetFileType (hFile=0x788) returned 0x1 [0125.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.346] GetFileType (hFile=0x788) returned 0x1 [0125.346] SetEndOfFile (hFile=0x788) returned 1 [0125.346] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x49b5 [0125.347] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2b898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2b898*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.348] WriteFile (in: hFile=0x788, lpBuffer=0x2b2cce8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2cce8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.350] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2b898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2b898*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.350] WriteFile (in: hFile=0x788, lpBuffer=0x2b2dcf4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2dcf4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.350] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2b898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2b898*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.351] WriteFile (in: hFile=0x788, lpBuffer=0x2b2ed00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2ed00*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.351] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2b898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2b898*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.351] WriteFile (in: hFile=0x788, lpBuffer=0x2b2fd0c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2fd0c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.351] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2b898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2b898*, lpNumberOfBytesRead=0xb3f1fc*=0x9b5, lpOverlapped=0x0) returned 1 [0125.352] WriteFile (in: hFile=0x788, lpBuffer=0x2b316d4*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b316d4*, lpNumberOfBytesWritten=0xb3f1b4*=0x9c0, lpOverlapped=0x0) returned 1 [0125.352] CloseHandle (hObject=0x788) returned 1 [0125.354] CloseHandle (hObject=0x78c) returned 1 [0125.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg", lpFilePart=0x0) returned 0x26 [0125.358] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\s-M AVO96.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\s-m avo96.jpg")) returned 1 [0125.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png", lpFilePart=0x0) returned 0x22 [0125.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tg9hg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0125.428] GetFileType (hFile=0x78c) returned 0x1 [0125.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.428] GetFileType (hFile=0x78c) returned 0x1 [0125.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png.P4WN3D", lpFilePart=0x0) returned 0x29 [0125.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\tg9hg.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0125.428] GetFileType (hFile=0x788) returned 0x1 [0125.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.428] GetFileType (hFile=0x788) returned 0x1 [0125.429] SetEndOfFile (hFile=0x788) returned 1 [0125.429] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1dd7 [0125.429] ReadFile (in: hFile=0x78c, lpBuffer=0x2b333f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b333f4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.430] WriteFile (in: hFile=0x788, lpBuffer=0x2b34844*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b34844*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.431] ReadFile (in: hFile=0x78c, lpBuffer=0x2b333f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b333f4*, lpNumberOfBytesRead=0xb3f1fc*=0xdd7, lpOverlapped=0x0) returned 1 [0125.432] WriteFile (in: hFile=0x788, lpBuffer=0x2b3662c*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b3662c*, lpNumberOfBytesWritten=0xb3f1b4*=0xde0, lpOverlapped=0x0) returned 1 [0125.432] CloseHandle (hObject=0x788) returned 1 [0125.433] CloseHandle (hObject=0x78c) returned 1 [0125.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png", lpFilePart=0x0) returned 0x22 [0125.436] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\tg9hG.png" (normalized: "c:\\users\\fd1hvy\\pictures\\tg9hg.png")) returned 1 [0125.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif", lpFilePart=0x0) returned 0x2d [0125.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\umdqdg7w39zyqe05.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0125.544] GetFileType (hFile=0x78c) returned 0x1 [0125.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.544] GetFileType (hFile=0x78c) returned 0x1 [0125.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif.P4WN3D", lpFilePart=0x0) returned 0x34 [0125.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.544] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\umdqdg7w39zyqe05.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0125.545] GetFileType (hFile=0x788) returned 0x1 [0125.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.546] GetFileType (hFile=0x788) returned 0x1 [0125.546] SetEndOfFile (hFile=0x788) returned 1 [0125.546] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xcedb [0125.546] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.548] WriteFile (in: hFile=0x788, lpBuffer=0x2b397fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b397fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.549] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.549] WriteFile (in: hFile=0x788, lpBuffer=0x2b3a808*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3a808*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.550] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.550] WriteFile (in: hFile=0x788, lpBuffer=0x2b3b814*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3b814*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.550] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.550] WriteFile (in: hFile=0x788, lpBuffer=0x2b3c820*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3c820*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.551] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.551] WriteFile (in: hFile=0x788, lpBuffer=0x2b3d82c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3d82c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.551] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.552] WriteFile (in: hFile=0x788, lpBuffer=0x2b3e838*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3e838*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.552] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.552] WriteFile (in: hFile=0x788, lpBuffer=0x2b3f844*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3f844*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.552] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.553] WriteFile (in: hFile=0x788, lpBuffer=0x2b40850*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b40850*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.553] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.553] WriteFile (in: hFile=0x788, lpBuffer=0x2b4185c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4185c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.553] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.554] WriteFile (in: hFile=0x788, lpBuffer=0x2b42868*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b42868*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.554] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.554] WriteFile (in: hFile=0x788, lpBuffer=0x2b43874*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b43874*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.554] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.555] WriteFile (in: hFile=0x788, lpBuffer=0x2b44880*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b44880*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.555] ReadFile (in: hFile=0x78c, lpBuffer=0x2b383ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b383ac*, lpNumberOfBytesRead=0xb3f1fc*=0xedb, lpOverlapped=0x0) returned 1 [0125.555] WriteFile (in: hFile=0x788, lpBuffer=0x2b46768*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b46768*, lpNumberOfBytesWritten=0xb3f1b4*=0xee0, lpOverlapped=0x0) returned 1 [0125.556] CloseHandle (hObject=0x788) returned 1 [0125.561] CloseHandle (hObject=0x78c) returned 1 [0125.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif", lpFilePart=0x0) returned 0x2d [0125.564] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\umDqDg7W39zYqe05.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\umdqdg7w39zyqe05.gif")) returned 1 [0125.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png", lpFilePart=0x0) returned 0x24 [0125.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png" (normalized: "c:\\users\\fd1hvy\\pictures\\vf54aj8.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0125.655] GetFileType (hFile=0x78c) returned 0x1 [0125.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.655] GetFileType (hFile=0x78c) returned 0x1 [0125.655] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png.P4WN3D", lpFilePart=0x0) returned 0x2b [0125.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.655] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\vf54aj8.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0125.656] GetFileType (hFile=0x788) returned 0x1 [0125.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.656] GetFileType (hFile=0x788) returned 0x1 [0125.656] SetEndOfFile (hFile=0x788) returned 1 [0125.656] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x11f14 [0125.756] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.758] WriteFile (in: hFile=0x788, lpBuffer=0x2b49904*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b49904*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.759] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.760] WriteFile (in: hFile=0x788, lpBuffer=0x2b4a910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4a910*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.760] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.760] WriteFile (in: hFile=0x788, lpBuffer=0x2b4b91c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4b91c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.761] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.761] WriteFile (in: hFile=0x788, lpBuffer=0x2b4c928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4c928*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.761] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.762] WriteFile (in: hFile=0x788, lpBuffer=0x2b4d934*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4d934*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.762] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.762] WriteFile (in: hFile=0x788, lpBuffer=0x2b4e940*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4e940*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.763] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.763] WriteFile (in: hFile=0x788, lpBuffer=0x2b4f94c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4f94c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.763] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.763] WriteFile (in: hFile=0x788, lpBuffer=0x2b50958*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b50958*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.764] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.764] WriteFile (in: hFile=0x788, lpBuffer=0x2b51964*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b51964*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.764] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.765] WriteFile (in: hFile=0x788, lpBuffer=0x2b52970*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b52970*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.765] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.765] WriteFile (in: hFile=0x788, lpBuffer=0x2b5397c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5397c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.765] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.766] WriteFile (in: hFile=0x788, lpBuffer=0x2b54988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b54988*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.766] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.766] WriteFile (in: hFile=0x788, lpBuffer=0x2b55994*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b55994*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.767] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.767] WriteFile (in: hFile=0x788, lpBuffer=0x2b569a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b569a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.767] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.767] WriteFile (in: hFile=0x788, lpBuffer=0x2b579ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b579ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.768] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.768] WriteFile (in: hFile=0x788, lpBuffer=0x2b589b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b589b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.768] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.769] WriteFile (in: hFile=0x788, lpBuffer=0x2b599c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b599c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.769] ReadFile (in: hFile=0x78c, lpBuffer=0x2b484b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b484b4*, lpNumberOfBytesRead=0xb3f1fc*=0xf14, lpOverlapped=0x0) returned 1 [0125.770] WriteFile (in: hFile=0x788, lpBuffer=0x2b5b8ec*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b5b8ec*, lpNumberOfBytesWritten=0xb3f1b4*=0xf20, lpOverlapped=0x0) returned 1 [0125.770] CloseHandle (hObject=0x788) returned 1 [0125.773] CloseHandle (hObject=0x78c) returned 1 [0125.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png", lpFilePart=0x0) returned 0x24 [0125.777] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\vf54Aj8.png" (normalized: "c:\\users\\fd1hvy\\pictures\\vf54aj8.png")) returned 1 [0125.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0125.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0125.820] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5808b68 [0125.822] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.822] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.822] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0125.822] FindClose (in: hFindFile=0x5808b68 | out: hFindFile=0x5808b68) returned 1 [0125.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0125.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0125.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0125.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0125.823] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5808b68 [0125.823] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.824] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.825] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.825] FindClose (in: hFindFile=0x5808b68 | out: hFindFile=0x5808b68) returned 1 [0125.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0125.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0125.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0125.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0125.827] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5808e68 [0125.828] FindNextFileW (in: hFindFile=0x5808e68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.928] FindNextFileW (in: hFindFile=0x5808e68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.929] FindNextFileW (in: hFindFile=0x5808e68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0125.929] FindClose (in: hFindFile=0x5808e68 | out: hFindFile=0x5808e68) returned 1 [0125.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0125.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0125.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0125.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0125.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5808b68 [0125.930] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.930] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0125.930] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.930] FindClose (in: hFindFile=0x5808b68 | out: hFindFile=0x5808b68) returned 1 [0125.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0125.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0125.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0125.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5", lpFilePart=0x0) returned 0x25 [0125.932] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fc90, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x5063b040, ftLastAccessTime.dwHighDateTime=0x1d5f0f2, ftLastWriteTime.dwLowDateTime=0x5063b040, ftLastWriteTime.dwHighDateTime=0x1d5f0f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5808b68 [0125.932] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fc90, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x5063b040, ftLastAccessTime.dwHighDateTime=0x1d5f0f2, ftLastWriteTime.dwLowDateTime=0x5063b040, ftLastWriteTime.dwHighDateTime=0x1d5f0f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.932] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3105a0, ftCreationTime.dwHighDateTime=0x1d5e457, ftLastAccessTime.dwLowDateTime=0x37c41d80, ftLastAccessTime.dwHighDateTime=0x1d5ec61, ftLastWriteTime.dwLowDateTime=0x37c41d80, ftLastWriteTime.dwHighDateTime=0x1d5ec61, nFileSizeHigh=0x0, nFileSizeLow=0x56aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="06y-LRDsdF.png", cAlternateFileName="06Y-LR~1.PNG")) returned 1 [0125.932] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7871a5c0, ftCreationTime.dwHighDateTime=0x1d5e7d2, ftLastAccessTime.dwLowDateTime=0xcffac7b0, ftLastAccessTime.dwHighDateTime=0x1d5ec08, ftLastWriteTime.dwLowDateTime=0xcffac7b0, ftLastWriteTime.dwHighDateTime=0x1d5ec08, nFileSizeHigh=0x0, nFileSizeLow=0x108ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="7ni c9g.jpg", cAlternateFileName="7NIC9G~1.JPG")) returned 1 [0125.933] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a52fc0, ftCreationTime.dwHighDateTime=0x1d5e5c3, ftLastAccessTime.dwLowDateTime=0xbaadc620, ftLastAccessTime.dwHighDateTime=0x1d5f09d, ftLastWriteTime.dwLowDateTime=0xbaadc620, ftLastWriteTime.dwHighDateTime=0x1d5f09d, nFileSizeHigh=0x0, nFileSizeLow=0x817, dwReserved0=0x0, dwReserved1=0x0, cFileName="dkciarLK.jpg", cAlternateFileName="")) returned 1 [0125.933] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x243b610, ftCreationTime.dwHighDateTime=0x1d5e456, ftLastAccessTime.dwLowDateTime=0x41d07900, ftLastAccessTime.dwHighDateTime=0x1d5e63e, ftLastWriteTime.dwLowDateTime=0x41d07900, ftLastWriteTime.dwHighDateTime=0x1d5e63e, nFileSizeHigh=0x0, nFileSizeLow=0x15b72, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fcdkj2 YJ1zmyajL.png", cAlternateFileName="FCDKJ2~1.PNG")) returned 1 [0125.933] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee10b50, ftCreationTime.dwHighDateTime=0x1d5ed22, ftLastAccessTime.dwLowDateTime=0x82764470, ftLastAccessTime.dwHighDateTime=0x1d5e662, ftLastWriteTime.dwLowDateTime=0x82764470, ftLastWriteTime.dwHighDateTime=0x1d5e662, nFileSizeHigh=0x0, nFileSizeLow=0x16a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="g9-mcdxhqihiwZ.jpg", cAlternateFileName="G9-MCD~1.JPG")) returned 1 [0125.933] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312826c0, ftCreationTime.dwHighDateTime=0x1d5e535, ftLastAccessTime.dwLowDateTime=0xaa326ca0, ftLastAccessTime.dwHighDateTime=0x1d5ec39, ftLastWriteTime.dwLowDateTime=0xaa326ca0, ftLastWriteTime.dwHighDateTime=0x1d5ec39, nFileSizeHigh=0x0, nFileSizeLow=0x11324, dwReserved0=0x0, dwReserved1=0x0, cFileName="IcU1YWILYLm_VpZL43O.jpg", cAlternateFileName="ICU1YW~1.JPG")) returned 1 [0125.933] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0e19560, ftCreationTime.dwHighDateTime=0x1d5e404, ftLastAccessTime.dwLowDateTime=0x8db951e0, ftLastAccessTime.dwHighDateTime=0x1d5e8a8, ftLastWriteTime.dwLowDateTime=0x8db951e0, ftLastWriteTime.dwHighDateTime=0x1d5e8a8, nFileSizeHigh=0x0, nFileSizeLow=0xf2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JDqWN f2E.png", cAlternateFileName="JDQWNF~1.PNG")) returned 1 [0125.934] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x429e4c50, ftCreationTime.dwHighDateTime=0x1d5e8db, ftLastAccessTime.dwLowDateTime=0xe80e3240, ftLastAccessTime.dwHighDateTime=0x1d5e2ff, ftLastWriteTime.dwLowDateTime=0xe80e3240, ftLastWriteTime.dwHighDateTime=0x1d5e2ff, nFileSizeHigh=0x0, nFileSizeLow=0x8256, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jiz1j.gif", cAlternateFileName="")) returned 1 [0125.934] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a07efc0, ftCreationTime.dwHighDateTime=0x1d5f07c, ftLastAccessTime.dwLowDateTime=0x33512f40, ftLastAccessTime.dwHighDateTime=0x1d5ee5f, ftLastWriteTime.dwLowDateTime=0x33512f40, ftLastWriteTime.dwHighDateTime=0x1d5ee5f, nFileSizeHigh=0x0, nFileSizeLow=0x1897f, dwReserved0=0x0, dwReserved1=0x0, cFileName="K8fXuy.png", cAlternateFileName="")) returned 1 [0125.934] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d80180, ftCreationTime.dwHighDateTime=0x1d5eb7c, ftLastAccessTime.dwLowDateTime=0xa0cd47b0, ftLastAccessTime.dwHighDateTime=0x1d5ecf8, ftLastWriteTime.dwLowDateTime=0xa0cd47b0, ftLastWriteTime.dwHighDateTime=0x1d5ecf8, nFileSizeHigh=0x0, nFileSizeLow=0x967a, dwReserved0=0x0, dwReserved1=0x0, cFileName="L4Jm-.bmp", cAlternateFileName="")) returned 1 [0125.934] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e74d70, ftCreationTime.dwHighDateTime=0x1d5e7ad, ftLastAccessTime.dwLowDateTime=0xdd66e20, ftLastAccessTime.dwHighDateTime=0x1d5e3ff, ftLastWriteTime.dwLowDateTime=0xdd66e20, ftLastWriteTime.dwHighDateTime=0x1d5e3ff, nFileSizeHigh=0x0, nFileSizeLow=0x7fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lUVTp.jpg", cAlternateFileName="")) returned 1 [0125.935] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde5dad70, ftCreationTime.dwHighDateTime=0x1d5eb06, ftLastAccessTime.dwLowDateTime=0x868d5190, ftLastAccessTime.dwHighDateTime=0x1d5eabb, ftLastWriteTime.dwLowDateTime=0x868d5190, ftLastWriteTime.dwHighDateTime=0x1d5eabb, nFileSizeHigh=0x0, nFileSizeLow=0x11066, dwReserved0=0x0, dwReserved1=0x0, cFileName="m2oQ.gif", cAlternateFileName="")) returned 1 [0125.935] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b67b360, ftCreationTime.dwHighDateTime=0x1d5efa4, ftLastAccessTime.dwLowDateTime=0xbfc0f630, ftLastAccessTime.dwHighDateTime=0x1d5f0c7, ftLastWriteTime.dwLowDateTime=0xbfc0f630, ftLastWriteTime.dwHighDateTime=0x1d5f0c7, nFileSizeHigh=0x0, nFileSizeLow=0x952d, dwReserved0=0x0, dwReserved1=0x0, cFileName="uM4MUCefD0Wmz.png", cAlternateFileName="UM4MUC~1.PNG")) returned 1 [0125.935] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89339c40, ftCreationTime.dwHighDateTime=0x1d5e482, ftLastAccessTime.dwLowDateTime=0xf38b1650, ftLastAccessTime.dwHighDateTime=0x1d5ed46, ftLastWriteTime.dwLowDateTime=0xf38b1650, ftLastWriteTime.dwHighDateTime=0x1d5ed46, nFileSizeHigh=0x0, nFileSizeLow=0x2357, dwReserved0=0x0, dwReserved1=0x0, cFileName="v 68BszOBIs 8t.png", cAlternateFileName="V68BSZ~1.PNG")) returned 1 [0125.935] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6086e620, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x5fe87610, ftLastAccessTime.dwHighDateTime=0x1d5e2d1, ftLastWriteTime.dwLowDateTime=0x5fe87610, ftLastWriteTime.dwHighDateTime=0x1d5e2d1, nFileSizeHigh=0x0, nFileSizeLow=0x6e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="W1Pr_afv.jpg", cAlternateFileName="")) returned 1 [0125.935] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fac2de0, ftCreationTime.dwHighDateTime=0x1d5e70b, ftLastAccessTime.dwLowDateTime=0x9d29520, ftLastAccessTime.dwHighDateTime=0x1d5edef, ftLastWriteTime.dwLowDateTime=0x9d29520, ftLastWriteTime.dwHighDateTime=0x1d5edef, nFileSizeHigh=0x0, nFileSizeLow=0xa2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_9FRra.png", cAlternateFileName="")) returned 1 [0125.936] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fac2de0, ftCreationTime.dwHighDateTime=0x1d5e70b, ftLastAccessTime.dwLowDateTime=0x9d29520, ftLastAccessTime.dwHighDateTime=0x1d5edef, ftLastWriteTime.dwLowDateTime=0x9d29520, ftLastWriteTime.dwHighDateTime=0x1d5edef, nFileSizeHigh=0x0, nFileSizeLow=0xa2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_9FRra.png", cAlternateFileName="")) returned 0 [0125.936] FindClose (in: hFindFile=0x5808b68 | out: hFindFile=0x5808b68) returned 1 [0125.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0125.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0125.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0125.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5", lpFilePart=0x0) returned 0x25 [0125.936] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fc90, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x5063b040, ftLastAccessTime.dwHighDateTime=0x1d5f0f2, ftLastWriteTime.dwLowDateTime=0x5063b040, ftLastWriteTime.dwHighDateTime=0x1d5f0f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5808b68 [0125.936] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd17fc90, ftCreationTime.dwHighDateTime=0x1d5e622, ftLastAccessTime.dwLowDateTime=0x5063b040, ftLastAccessTime.dwHighDateTime=0x1d5f0f2, ftLastWriteTime.dwLowDateTime=0x5063b040, ftLastWriteTime.dwHighDateTime=0x1d5f0f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.937] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde3105a0, ftCreationTime.dwHighDateTime=0x1d5e457, ftLastAccessTime.dwLowDateTime=0x37c41d80, ftLastAccessTime.dwHighDateTime=0x1d5ec61, ftLastWriteTime.dwLowDateTime=0x37c41d80, ftLastWriteTime.dwHighDateTime=0x1d5ec61, nFileSizeHigh=0x0, nFileSizeLow=0x56aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="06y-LRDsdF.png", cAlternateFileName="06Y-LR~1.PNG")) returned 1 [0125.937] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7871a5c0, ftCreationTime.dwHighDateTime=0x1d5e7d2, ftLastAccessTime.dwLowDateTime=0xcffac7b0, ftLastAccessTime.dwHighDateTime=0x1d5ec08, ftLastWriteTime.dwLowDateTime=0xcffac7b0, ftLastWriteTime.dwHighDateTime=0x1d5ec08, nFileSizeHigh=0x0, nFileSizeLow=0x108ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="7ni c9g.jpg", cAlternateFileName="7NIC9G~1.JPG")) returned 1 [0125.937] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a52fc0, ftCreationTime.dwHighDateTime=0x1d5e5c3, ftLastAccessTime.dwLowDateTime=0xbaadc620, ftLastAccessTime.dwHighDateTime=0x1d5f09d, ftLastWriteTime.dwLowDateTime=0xbaadc620, ftLastWriteTime.dwHighDateTime=0x1d5f09d, nFileSizeHigh=0x0, nFileSizeLow=0x817, dwReserved0=0x0, dwReserved1=0x0, cFileName="dkciarLK.jpg", cAlternateFileName="")) returned 1 [0125.937] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x243b610, ftCreationTime.dwHighDateTime=0x1d5e456, ftLastAccessTime.dwLowDateTime=0x41d07900, ftLastAccessTime.dwHighDateTime=0x1d5e63e, ftLastWriteTime.dwLowDateTime=0x41d07900, ftLastWriteTime.dwHighDateTime=0x1d5e63e, nFileSizeHigh=0x0, nFileSizeLow=0x15b72, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fcdkj2 YJ1zmyajL.png", cAlternateFileName="FCDKJ2~1.PNG")) returned 1 [0125.937] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfee10b50, ftCreationTime.dwHighDateTime=0x1d5ed22, ftLastAccessTime.dwLowDateTime=0x82764470, ftLastAccessTime.dwHighDateTime=0x1d5e662, ftLastWriteTime.dwLowDateTime=0x82764470, ftLastWriteTime.dwHighDateTime=0x1d5e662, nFileSizeHigh=0x0, nFileSizeLow=0x16a37, dwReserved0=0x0, dwReserved1=0x0, cFileName="g9-mcdxhqihiwZ.jpg", cAlternateFileName="G9-MCD~1.JPG")) returned 1 [0125.938] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312826c0, ftCreationTime.dwHighDateTime=0x1d5e535, ftLastAccessTime.dwLowDateTime=0xaa326ca0, ftLastAccessTime.dwHighDateTime=0x1d5ec39, ftLastWriteTime.dwLowDateTime=0xaa326ca0, ftLastWriteTime.dwHighDateTime=0x1d5ec39, nFileSizeHigh=0x0, nFileSizeLow=0x11324, dwReserved0=0x0, dwReserved1=0x0, cFileName="IcU1YWILYLm_VpZL43O.jpg", cAlternateFileName="ICU1YW~1.JPG")) returned 1 [0125.938] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0e19560, ftCreationTime.dwHighDateTime=0x1d5e404, ftLastAccessTime.dwLowDateTime=0x8db951e0, ftLastAccessTime.dwHighDateTime=0x1d5e8a8, ftLastWriteTime.dwLowDateTime=0x8db951e0, ftLastWriteTime.dwHighDateTime=0x1d5e8a8, nFileSizeHigh=0x0, nFileSizeLow=0xf2a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JDqWN f2E.png", cAlternateFileName="JDQWNF~1.PNG")) returned 1 [0125.938] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x429e4c50, ftCreationTime.dwHighDateTime=0x1d5e8db, ftLastAccessTime.dwLowDateTime=0xe80e3240, ftLastAccessTime.dwHighDateTime=0x1d5e2ff, ftLastWriteTime.dwLowDateTime=0xe80e3240, ftLastWriteTime.dwHighDateTime=0x1d5e2ff, nFileSizeHigh=0x0, nFileSizeLow=0x8256, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jiz1j.gif", cAlternateFileName="")) returned 1 [0125.938] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a07efc0, ftCreationTime.dwHighDateTime=0x1d5f07c, ftLastAccessTime.dwLowDateTime=0x33512f40, ftLastAccessTime.dwHighDateTime=0x1d5ee5f, ftLastWriteTime.dwLowDateTime=0x33512f40, ftLastWriteTime.dwHighDateTime=0x1d5ee5f, nFileSizeHigh=0x0, nFileSizeLow=0x1897f, dwReserved0=0x0, dwReserved1=0x0, cFileName="K8fXuy.png", cAlternateFileName="")) returned 1 [0125.938] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d80180, ftCreationTime.dwHighDateTime=0x1d5eb7c, ftLastAccessTime.dwLowDateTime=0xa0cd47b0, ftLastAccessTime.dwHighDateTime=0x1d5ecf8, ftLastWriteTime.dwLowDateTime=0xa0cd47b0, ftLastWriteTime.dwHighDateTime=0x1d5ecf8, nFileSizeHigh=0x0, nFileSizeLow=0x967a, dwReserved0=0x0, dwReserved1=0x0, cFileName="L4Jm-.bmp", cAlternateFileName="")) returned 1 [0125.938] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34e74d70, ftCreationTime.dwHighDateTime=0x1d5e7ad, ftLastAccessTime.dwLowDateTime=0xdd66e20, ftLastAccessTime.dwHighDateTime=0x1d5e3ff, ftLastWriteTime.dwLowDateTime=0xdd66e20, ftLastWriteTime.dwHighDateTime=0x1d5e3ff, nFileSizeHigh=0x0, nFileSizeLow=0x7fa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lUVTp.jpg", cAlternateFileName="")) returned 1 [0125.939] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde5dad70, ftCreationTime.dwHighDateTime=0x1d5eb06, ftLastAccessTime.dwLowDateTime=0x868d5190, ftLastAccessTime.dwHighDateTime=0x1d5eabb, ftLastWriteTime.dwLowDateTime=0x868d5190, ftLastWriteTime.dwHighDateTime=0x1d5eabb, nFileSizeHigh=0x0, nFileSizeLow=0x11066, dwReserved0=0x0, dwReserved1=0x0, cFileName="m2oQ.gif", cAlternateFileName="")) returned 1 [0125.939] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b67b360, ftCreationTime.dwHighDateTime=0x1d5efa4, ftLastAccessTime.dwLowDateTime=0xbfc0f630, ftLastAccessTime.dwHighDateTime=0x1d5f0c7, ftLastWriteTime.dwLowDateTime=0xbfc0f630, ftLastWriteTime.dwHighDateTime=0x1d5f0c7, nFileSizeHigh=0x0, nFileSizeLow=0x952d, dwReserved0=0x0, dwReserved1=0x0, cFileName="uM4MUCefD0Wmz.png", cAlternateFileName="UM4MUC~1.PNG")) returned 1 [0125.939] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89339c40, ftCreationTime.dwHighDateTime=0x1d5e482, ftLastAccessTime.dwLowDateTime=0xf38b1650, ftLastAccessTime.dwHighDateTime=0x1d5ed46, ftLastWriteTime.dwLowDateTime=0xf38b1650, ftLastWriteTime.dwHighDateTime=0x1d5ed46, nFileSizeHigh=0x0, nFileSizeLow=0x2357, dwReserved0=0x0, dwReserved1=0x0, cFileName="v 68BszOBIs 8t.png", cAlternateFileName="V68BSZ~1.PNG")) returned 1 [0125.939] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6086e620, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0x5fe87610, ftLastAccessTime.dwHighDateTime=0x1d5e2d1, ftLastWriteTime.dwLowDateTime=0x5fe87610, ftLastWriteTime.dwHighDateTime=0x1d5e2d1, nFileSizeHigh=0x0, nFileSizeLow=0x6e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="W1Pr_afv.jpg", cAlternateFileName="")) returned 1 [0125.939] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8fac2de0, ftCreationTime.dwHighDateTime=0x1d5e70b, ftLastAccessTime.dwLowDateTime=0x9d29520, ftLastAccessTime.dwHighDateTime=0x1d5edef, ftLastWriteTime.dwLowDateTime=0x9d29520, ftLastWriteTime.dwHighDateTime=0x1d5edef, nFileSizeHigh=0x0, nFileSizeLow=0xa2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_9FRra.png", cAlternateFileName="")) returned 1 [0125.939] FindNextFileW (in: hFindFile=0x5808b68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.940] FindClose (in: hFindFile=0x5808b68 | out: hFindFile=0x5808b68) returned 1 [0125.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0125.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0125.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png", lpFilePart=0x0) returned 0x34 [0125.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\06y-lrdsdf.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0125.943] GetFileType (hFile=0x78c) returned 0x1 [0125.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.943] GetFileType (hFile=0x78c) returned 0x1 [0125.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png.P4WN3D", lpFilePart=0x0) returned 0x3b [0125.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0125.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\06y-lrdsdf.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0125.944] GetFileType (hFile=0x788) returned 0x1 [0125.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0125.944] GetFileType (hFile=0x788) returned 0x1 [0125.944] SetEndOfFile (hFile=0x788) returned 1 [0125.944] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x56aa [0125.945] ReadFile (in: hFile=0x78c, lpBuffer=0x2b63ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b63ed4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.946] WriteFile (in: hFile=0x788, lpBuffer=0x2b65324*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65324*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.947] ReadFile (in: hFile=0x78c, lpBuffer=0x2b63ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b63ed4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.947] WriteFile (in: hFile=0x788, lpBuffer=0x2b66330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b66330*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.948] ReadFile (in: hFile=0x78c, lpBuffer=0x2b63ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b63ed4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.948] WriteFile (in: hFile=0x788, lpBuffer=0x2b6733c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6733c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.948] ReadFile (in: hFile=0x78c, lpBuffer=0x2b63ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b63ed4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.948] WriteFile (in: hFile=0x788, lpBuffer=0x2b68348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b68348*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.949] ReadFile (in: hFile=0x78c, lpBuffer=0x2b63ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b63ed4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0125.949] WriteFile (in: hFile=0x788, lpBuffer=0x2b69354*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b69354*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0125.949] ReadFile (in: hFile=0x78c, lpBuffer=0x2b63ed4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b63ed4*, lpNumberOfBytesRead=0xb3f1fc*=0x6aa, lpOverlapped=0x0) returned 1 [0125.950] WriteFile (in: hFile=0x788, lpBuffer=0x2b6aa0c*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b6aa0c*, lpNumberOfBytesWritten=0xb3f1b4*=0x6b0, lpOverlapped=0x0) returned 1 [0125.950] CloseHandle (hObject=0x788) returned 1 [0125.953] CloseHandle (hObject=0x78c) returned 1 [0125.956] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png", lpFilePart=0x0) returned 0x34 [0125.956] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\06y-LRDsdF.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\06y-lrdsdf.png")) returned 1 [0126.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg", lpFilePart=0x0) returned 0x31 [0126.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\7ni c9g.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.037] GetFileType (hFile=0x78c) returned 0x1 [0126.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.037] GetFileType (hFile=0x78c) returned 0x1 [0126.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg.P4WN3D", lpFilePart=0x0) returned 0x38 [0126.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\7ni c9g.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.038] GetFileType (hFile=0x788) returned 0x1 [0126.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.038] GetFileType (hFile=0x788) returned 0x1 [0126.038] SetEndOfFile (hFile=0x788) returned 1 [0126.038] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x108ec [0126.038] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.039] WriteFile (in: hFile=0x788, lpBuffer=0x2b6dbfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6dbfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.040] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.040] WriteFile (in: hFile=0x788, lpBuffer=0x2b6ec08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6ec08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.041] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.041] WriteFile (in: hFile=0x788, lpBuffer=0x2b6fc14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6fc14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.041] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.041] WriteFile (in: hFile=0x788, lpBuffer=0x2b70c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b70c20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.041] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.042] WriteFile (in: hFile=0x788, lpBuffer=0x2b71c2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b71c2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.042] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.042] WriteFile (in: hFile=0x788, lpBuffer=0x2b72c38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b72c38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.042] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.043] WriteFile (in: hFile=0x788, lpBuffer=0x2b73c44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b73c44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.043] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.043] WriteFile (in: hFile=0x788, lpBuffer=0x2b74c50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b74c50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.043] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.043] WriteFile (in: hFile=0x788, lpBuffer=0x2b75c5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b75c5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.043] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.044] WriteFile (in: hFile=0x788, lpBuffer=0x2b76c68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b76c68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.044] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.044] WriteFile (in: hFile=0x788, lpBuffer=0x2b77c74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b77c74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.044] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.045] WriteFile (in: hFile=0x788, lpBuffer=0x2b78c80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b78c80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.045] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.045] WriteFile (in: hFile=0x788, lpBuffer=0x2b79c8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b79c8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.045] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.045] WriteFile (in: hFile=0x788, lpBuffer=0x2b7ac98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7ac98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.045] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.046] WriteFile (in: hFile=0x788, lpBuffer=0x2b7bca4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7bca4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.046] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.046] WriteFile (in: hFile=0x788, lpBuffer=0x2b7ccb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7ccb0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.046] ReadFile (in: hFile=0x78c, lpBuffer=0x2b6c7ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b6c7ac*, lpNumberOfBytesRead=0xb3f1fc*=0x8ec, lpOverlapped=0x0) returned 1 [0126.046] WriteFile (in: hFile=0x788, lpBuffer=0x2b7e5a8*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b7e5a8*, lpNumberOfBytesWritten=0xb3f1b4*=0x8f0, lpOverlapped=0x0) returned 1 [0126.047] CloseHandle (hObject=0x788) returned 1 [0126.092] CloseHandle (hObject=0x78c) returned 1 [0126.102] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg", lpFilePart=0x0) returned 0x31 [0126.102] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\7ni c9g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\7ni c9g.jpg")) returned 1 [0126.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg", lpFilePart=0x0) returned 0x32 [0126.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\dkciarlk.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.114] GetFileType (hFile=0x78c) returned 0x1 [0126.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.114] GetFileType (hFile=0x78c) returned 0x1 [0126.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg.P4WN3D", lpFilePart=0x0) returned 0x39 [0126.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\dkciarlk.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.114] GetFileType (hFile=0x788) returned 0x1 [0126.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.114] GetFileType (hFile=0x788) returned 0x1 [0126.115] SetEndOfFile (hFile=0x788) returned 1 [0126.115] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x817 [0126.115] ReadFile (in: hFile=0x78c, lpBuffer=0x2b8033c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b8033c*, lpNumberOfBytesRead=0xb3f1fc*=0x817, lpOverlapped=0x0) returned 1 [0126.116] WriteFile (in: hFile=0x788, lpBuffer=0x2b81fa8*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b81fa8*, lpNumberOfBytesWritten=0xb3f1b4*=0x820, lpOverlapped=0x0) returned 1 [0126.117] CloseHandle (hObject=0x788) returned 1 [0126.118] CloseHandle (hObject=0x78c) returned 1 [0126.120] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg", lpFilePart=0x0) returned 0x32 [0126.120] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\dkciarLK.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\dkciarlk.jpg")) returned 1 [0126.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png", lpFilePart=0x0) returned 0x3a [0126.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\fcdkj2 yj1zmyajl.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.141] GetFileType (hFile=0x78c) returned 0x1 [0126.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.141] GetFileType (hFile=0x78c) returned 0x1 [0126.141] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png.P4WN3D", lpFilePart=0x0) returned 0x41 [0126.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.141] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\fcdkj2 yj1zmyajl.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.141] GetFileType (hFile=0x788) returned 0x1 [0126.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.142] GetFileType (hFile=0x788) returned 0x1 [0126.142] SetEndOfFile (hFile=0x788) returned 1 [0126.142] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x15b72 [0126.142] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.144] WriteFile (in: hFile=0x788, lpBuffer=0x2b851ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b851ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.145] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.145] WriteFile (in: hFile=0x788, lpBuffer=0x2b861f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b861f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.146] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.146] WriteFile (in: hFile=0x788, lpBuffer=0x2b87204*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b87204*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.146] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.147] WriteFile (in: hFile=0x788, lpBuffer=0x2b88210*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b88210*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.147] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.147] WriteFile (in: hFile=0x788, lpBuffer=0x2b8921c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8921c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.147] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.148] WriteFile (in: hFile=0x788, lpBuffer=0x2b8a228*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8a228*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.148] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.148] WriteFile (in: hFile=0x788, lpBuffer=0x2b8b234*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8b234*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.149] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.149] WriteFile (in: hFile=0x788, lpBuffer=0x2b8c240*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8c240*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.149] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.149] WriteFile (in: hFile=0x788, lpBuffer=0x2b8d24c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8d24c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.150] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.150] WriteFile (in: hFile=0x788, lpBuffer=0x2b8e258*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8e258*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.151] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.151] WriteFile (in: hFile=0x788, lpBuffer=0x2b8f264*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8f264*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.151] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.151] WriteFile (in: hFile=0x788, lpBuffer=0x2b90270*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b90270*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.152] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.152] WriteFile (in: hFile=0x788, lpBuffer=0x2b9127c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9127c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.153] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.153] WriteFile (in: hFile=0x788, lpBuffer=0x2b92288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b92288*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.153] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.154] WriteFile (in: hFile=0x788, lpBuffer=0x2b93294*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b93294*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.154] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.154] WriteFile (in: hFile=0x788, lpBuffer=0x2b942a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b942a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.154] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.155] WriteFile (in: hFile=0x788, lpBuffer=0x2b952ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b952ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.155] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.155] WriteFile (in: hFile=0x788, lpBuffer=0x2b962b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b962b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.155] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.156] WriteFile (in: hFile=0x788, lpBuffer=0x2b972c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b972c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.156] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.248] WriteFile (in: hFile=0x788, lpBuffer=0x2b982d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b982d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.248] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.249] WriteFile (in: hFile=0x788, lpBuffer=0x2b992dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b992dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.249] ReadFile (in: hFile=0x78c, lpBuffer=0x2b83d9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b83d9c*, lpNumberOfBytesRead=0xb3f1fc*=0xb72, lpOverlapped=0x0) returned 1 [0126.249] WriteFile (in: hFile=0x788, lpBuffer=0x2b9ae64*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b9ae64*, lpNumberOfBytesWritten=0xb3f1b4*=0xb80, lpOverlapped=0x0) returned 1 [0126.249] CloseHandle (hObject=0x788) returned 1 [0126.253] CloseHandle (hObject=0x78c) returned 1 [0126.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png", lpFilePart=0x0) returned 0x3a [0126.292] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Fcdkj2 YJ1zmyajL.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\fcdkj2 yj1zmyajl.png")) returned 1 [0126.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg", lpFilePart=0x0) returned 0x38 [0126.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\g9-mcdxhqihiwz.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.305] GetFileType (hFile=0x78c) returned 0x1 [0126.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.305] GetFileType (hFile=0x78c) returned 0x1 [0126.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg.P4WN3D", lpFilePart=0x0) returned 0x3f [0126.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\g9-mcdxhqihiwz.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.306] GetFileType (hFile=0x788) returned 0x1 [0126.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.306] GetFileType (hFile=0x788) returned 0x1 [0126.306] SetEndOfFile (hFile=0x788) returned 1 [0126.306] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x16a37 [0126.307] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.308] WriteFile (in: hFile=0x788, lpBuffer=0x2b9e0b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9e0b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.309] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.310] WriteFile (in: hFile=0x788, lpBuffer=0x2b9f0c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9f0c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.310] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.310] WriteFile (in: hFile=0x788, lpBuffer=0x2ba00d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba00d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.310] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.311] WriteFile (in: hFile=0x788, lpBuffer=0x2ba10dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba10dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.311] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.312] WriteFile (in: hFile=0x788, lpBuffer=0x2ba20e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba20e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.312] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.313] WriteFile (in: hFile=0x788, lpBuffer=0x2ba30f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba30f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.313] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.313] WriteFile (in: hFile=0x788, lpBuffer=0x2ba4100*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba4100*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.314] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.314] WriteFile (in: hFile=0x788, lpBuffer=0x2ba510c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba510c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.314] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.315] WriteFile (in: hFile=0x788, lpBuffer=0x2ba6118*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba6118*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.315] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.315] WriteFile (in: hFile=0x788, lpBuffer=0x2ba7124*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba7124*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.315] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.316] WriteFile (in: hFile=0x788, lpBuffer=0x2ba8130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba8130*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.316] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.316] WriteFile (in: hFile=0x788, lpBuffer=0x2ba913c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba913c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.317] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.317] WriteFile (in: hFile=0x788, lpBuffer=0x2baa148*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2baa148*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.317] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.318] WriteFile (in: hFile=0x788, lpBuffer=0x2bab154*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bab154*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.318] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.318] WriteFile (in: hFile=0x788, lpBuffer=0x2bac160*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bac160*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.318] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.319] WriteFile (in: hFile=0x788, lpBuffer=0x2bad16c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bad16c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.319] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.319] WriteFile (in: hFile=0x788, lpBuffer=0x2bae178*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bae178*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.319] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.320] WriteFile (in: hFile=0x788, lpBuffer=0x2baf184*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2baf184*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.320] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.320] WriteFile (in: hFile=0x788, lpBuffer=0x2bb0190*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb0190*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.321] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.321] WriteFile (in: hFile=0x788, lpBuffer=0x2bb119c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb119c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.322] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.322] WriteFile (in: hFile=0x788, lpBuffer=0x2bb21a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb21a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.322] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.323] WriteFile (in: hFile=0x788, lpBuffer=0x2bb31b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb31b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.323] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9cc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9cc68*, lpNumberOfBytesRead=0xb3f1fc*=0xa37, lpOverlapped=0x0) returned 1 [0126.323] WriteFile (in: hFile=0x788, lpBuffer=0x2bb4bfc*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bb4bfc*, lpNumberOfBytesWritten=0xb3f1b4*=0xa40, lpOverlapped=0x0) returned 1 [0126.323] CloseHandle (hObject=0x788) returned 1 [0126.327] CloseHandle (hObject=0x78c) returned 1 [0126.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg", lpFilePart=0x0) returned 0x38 [0126.337] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\g9-mcdxhqihiwZ.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\g9-mcdxhqihiwz.jpg")) returned 1 [0126.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg", lpFilePart=0x0) returned 0x3d [0126.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.349] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\icu1ywilylm_vpzl43o.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.349] GetFileType (hFile=0x78c) returned 0x1 [0126.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.349] GetFileType (hFile=0x78c) returned 0x1 [0126.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg.P4WN3D", lpFilePart=0x0) returned 0x44 [0126.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.349] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\icu1ywilylm_vpzl43o.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.349] GetFileType (hFile=0x788) returned 0x1 [0126.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.350] GetFileType (hFile=0x788) returned 0x1 [0126.350] SetEndOfFile (hFile=0x788) returned 1 [0126.350] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x11324 [0126.350] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.352] WriteFile (in: hFile=0x788, lpBuffer=0x2bb7e78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb7e78*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.353] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.353] WriteFile (in: hFile=0x788, lpBuffer=0x2bb8e84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb8e84*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.353] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.354] WriteFile (in: hFile=0x788, lpBuffer=0x2bb9e90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb9e90*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.354] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.354] WriteFile (in: hFile=0x788, lpBuffer=0x2bbae9c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbae9c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.355] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.355] WriteFile (in: hFile=0x788, lpBuffer=0x2bbbea8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbbea8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.355] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.356] WriteFile (in: hFile=0x788, lpBuffer=0x2bbceb4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbceb4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.356] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.356] WriteFile (in: hFile=0x788, lpBuffer=0x2bbdec0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbdec0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.356] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.357] WriteFile (in: hFile=0x788, lpBuffer=0x2bbeecc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbeecc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.357] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.358] WriteFile (in: hFile=0x788, lpBuffer=0x2bbfed8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbfed8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.358] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.358] WriteFile (in: hFile=0x788, lpBuffer=0x2bc0ee4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc0ee4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.359] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.359] WriteFile (in: hFile=0x788, lpBuffer=0x2bc1ef0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc1ef0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.360] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.360] WriteFile (in: hFile=0x788, lpBuffer=0x2bc2efc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc2efc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.360] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.361] WriteFile (in: hFile=0x788, lpBuffer=0x2bc3f08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc3f08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.361] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.361] WriteFile (in: hFile=0x788, lpBuffer=0x2bc4f14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc4f14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.362] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.362] WriteFile (in: hFile=0x788, lpBuffer=0x2bc5f20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc5f20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.362] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.362] WriteFile (in: hFile=0x788, lpBuffer=0x2bc6f2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc6f2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.363] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.363] WriteFile (in: hFile=0x788, lpBuffer=0x2bc7f38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc7f38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.363] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb6a28*, lpNumberOfBytesRead=0xb3f1fc*=0x324, lpOverlapped=0x0) returned 1 [0126.364] WriteFile (in: hFile=0x788, lpBuffer=0x2bc9270*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bc9270*, lpNumberOfBytesWritten=0xb3f1b4*=0x330, lpOverlapped=0x0) returned 1 [0126.364] CloseHandle (hObject=0x788) returned 1 [0126.367] CloseHandle (hObject=0x78c) returned 1 [0126.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg", lpFilePart=0x0) returned 0x3d [0126.370] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\IcU1YWILYLm_VpZL43O.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\icu1ywilylm_vpzl43o.jpg")) returned 1 [0126.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png", lpFilePart=0x0) returned 0x33 [0126.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.390] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\jdqwn f2e.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.390] GetFileType (hFile=0x78c) returned 0x1 [0126.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.391] GetFileType (hFile=0x78c) returned 0x1 [0126.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png.P4WN3D", lpFilePart=0x0) returned 0x3a [0126.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.396] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\jdqwn f2e.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.396] GetFileType (hFile=0x788) returned 0x1 [0126.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.397] GetFileType (hFile=0x788) returned 0x1 [0126.397] SetEndOfFile (hFile=0x788) returned 1 [0126.397] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xf2a4 [0126.397] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.398] WriteFile (in: hFile=0x788, lpBuffer=0x2bcc498*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bcc498*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.400] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.400] WriteFile (in: hFile=0x788, lpBuffer=0x2bcd4a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bcd4a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.400] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.401] WriteFile (in: hFile=0x788, lpBuffer=0x2bce4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bce4b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.401] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.401] WriteFile (in: hFile=0x788, lpBuffer=0x2bcf4bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bcf4bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.401] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.402] WriteFile (in: hFile=0x788, lpBuffer=0x2bd04c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd04c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.402] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.403] WriteFile (in: hFile=0x788, lpBuffer=0x2bd14d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd14d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.403] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.403] WriteFile (in: hFile=0x788, lpBuffer=0x2bd24e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd24e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.403] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.404] WriteFile (in: hFile=0x788, lpBuffer=0x2bd34ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd34ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.404] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.404] WriteFile (in: hFile=0x788, lpBuffer=0x2bd44f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd44f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.404] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.405] WriteFile (in: hFile=0x788, lpBuffer=0x2bd5504*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd5504*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.405] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.405] WriteFile (in: hFile=0x788, lpBuffer=0x2bd6510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd6510*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.406] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.406] WriteFile (in: hFile=0x788, lpBuffer=0x2bd751c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd751c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.406] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.407] WriteFile (in: hFile=0x788, lpBuffer=0x2bd8528*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd8528*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.407] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.407] WriteFile (in: hFile=0x788, lpBuffer=0x2bd9534*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd9534*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.408] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.408] WriteFile (in: hFile=0x788, lpBuffer=0x2bda540*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bda540*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.408] ReadFile (in: hFile=0x78c, lpBuffer=0x2bcb048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bcb048*, lpNumberOfBytesRead=0xb3f1fc*=0x2a4, lpOverlapped=0x0) returned 1 [0126.409] WriteFile (in: hFile=0x788, lpBuffer=0x2bdb7f8*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bdb7f8*, lpNumberOfBytesWritten=0xb3f1b4*=0x2b0, lpOverlapped=0x0) returned 1 [0126.409] CloseHandle (hObject=0x788) returned 1 [0126.412] CloseHandle (hObject=0x78c) returned 1 [0126.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png", lpFilePart=0x0) returned 0x33 [0126.414] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\JDqWN f2E.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\jdqwn f2e.png")) returned 1 [0126.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif", lpFilePart=0x0) returned 0x2f [0126.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\jiz1j.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.421] GetFileType (hFile=0x78c) returned 0x1 [0126.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.421] GetFileType (hFile=0x78c) returned 0x1 [0126.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif.P4WN3D", lpFilePart=0x0) returned 0x36 [0126.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\jiz1j.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.421] GetFileType (hFile=0x788) returned 0x1 [0126.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.422] GetFileType (hFile=0x788) returned 0x1 [0126.422] SetEndOfFile (hFile=0x788) returned 1 [0126.422] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x8256 [0126.422] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.424] WriteFile (in: hFile=0x788, lpBuffer=0x2bde9d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bde9d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.425] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.426] WriteFile (in: hFile=0x788, lpBuffer=0x2bdf9dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bdf9dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.426] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.426] WriteFile (in: hFile=0x788, lpBuffer=0x2be09e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be09e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.427] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.427] WriteFile (in: hFile=0x788, lpBuffer=0x2be19f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be19f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.427] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.428] WriteFile (in: hFile=0x788, lpBuffer=0x2be2a00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be2a00*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.428] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.428] WriteFile (in: hFile=0x788, lpBuffer=0x2be3a0c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be3a0c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.429] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.429] WriteFile (in: hFile=0x788, lpBuffer=0x2be4a18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be4a18*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.429] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.430] WriteFile (in: hFile=0x788, lpBuffer=0x2be5a24*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be5a24*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.430] ReadFile (in: hFile=0x78c, lpBuffer=0x2bdd580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bdd580*, lpNumberOfBytesRead=0xb3f1fc*=0x256, lpOverlapped=0x0) returned 1 [0126.430] WriteFile (in: hFile=0x788, lpBuffer=0x2be6c8c*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2be6c8c*, lpNumberOfBytesWritten=0xb3f1b4*=0x260, lpOverlapped=0x0) returned 1 [0126.430] CloseHandle (hObject=0x788) returned 1 [0126.432] CloseHandle (hObject=0x78c) returned 1 [0126.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif", lpFilePart=0x0) returned 0x2f [0126.435] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\Jiz1j.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\jiz1j.gif")) returned 1 [0126.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png", lpFilePart=0x0) returned 0x30 [0126.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\k8fxuy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.683] GetFileType (hFile=0x78c) returned 0x1 [0126.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.683] GetFileType (hFile=0x78c) returned 0x1 [0126.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png.P4WN3D", lpFilePart=0x0) returned 0x37 [0126.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.684] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\k8fxuy.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.685] GetFileType (hFile=0x788) returned 0x1 [0126.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.685] GetFileType (hFile=0x788) returned 0x1 [0126.685] SetEndOfFile (hFile=0x788) returned 1 [0126.685] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1897f [0126.686] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.687] WriteFile (in: hFile=0x788, lpBuffer=0x2be9e5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be9e5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.689] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.689] WriteFile (in: hFile=0x788, lpBuffer=0x2beae68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2beae68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.690] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.690] WriteFile (in: hFile=0x788, lpBuffer=0x2bebe74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bebe74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.690] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.691] WriteFile (in: hFile=0x788, lpBuffer=0x2bece80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bece80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.691] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.691] WriteFile (in: hFile=0x788, lpBuffer=0x2bede8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bede8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.692] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.692] WriteFile (in: hFile=0x788, lpBuffer=0x2beee98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2beee98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.692] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.693] WriteFile (in: hFile=0x788, lpBuffer=0x2befea4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2befea4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.693] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.693] WriteFile (in: hFile=0x788, lpBuffer=0x2bf0eb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf0eb0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.693] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.694] WriteFile (in: hFile=0x788, lpBuffer=0x2bf1ebc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf1ebc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.694] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.695] WriteFile (in: hFile=0x788, lpBuffer=0x2bf2ec8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf2ec8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.695] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.695] WriteFile (in: hFile=0x788, lpBuffer=0x2bf3ed4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf3ed4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.695] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.696] WriteFile (in: hFile=0x788, lpBuffer=0x2bf4ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf4ee0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.696] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.696] WriteFile (in: hFile=0x788, lpBuffer=0x2bf5eec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf5eec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.697] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.697] WriteFile (in: hFile=0x788, lpBuffer=0x2bf6ef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf6ef8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.697] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.698] WriteFile (in: hFile=0x788, lpBuffer=0x2bf7f04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf7f04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.698] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.698] WriteFile (in: hFile=0x788, lpBuffer=0x2bf8f10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf8f10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.698] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.699] WriteFile (in: hFile=0x788, lpBuffer=0x2bf9f1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf9f1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.699] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.700] WriteFile (in: hFile=0x788, lpBuffer=0x2bfaf28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfaf28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.700] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.700] WriteFile (in: hFile=0x788, lpBuffer=0x2bfbf34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfbf34*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.701] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.701] WriteFile (in: hFile=0x788, lpBuffer=0x2bfcf40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfcf40*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.701] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.702] WriteFile (in: hFile=0x788, lpBuffer=0x2bfdf4c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfdf4c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.702] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.702] WriteFile (in: hFile=0x788, lpBuffer=0x2bfef58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfef58*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.702] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.703] WriteFile (in: hFile=0x788, lpBuffer=0x2bfff64*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfff64*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.703] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.704] WriteFile (in: hFile=0x788, lpBuffer=0x2c00f70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c00f70*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.704] ReadFile (in: hFile=0x78c, lpBuffer=0x2be8a0c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2be8a0c*, lpNumberOfBytesRead=0xb3f1fc*=0x97f, lpOverlapped=0x0) returned 1 [0126.705] WriteFile (in: hFile=0x788, lpBuffer=0x2c028f8*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c028f8*, lpNumberOfBytesWritten=0xb3f1b4*=0x980, lpOverlapped=0x0) returned 1 [0126.705] CloseHandle (hObject=0x788) returned 1 [0126.713] CloseHandle (hObject=0x78c) returned 1 [0126.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png", lpFilePart=0x0) returned 0x30 [0126.716] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\K8fXuy.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\k8fxuy.png")) returned 1 [0126.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp", lpFilePart=0x0) returned 0x2f [0126.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.763] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\l4jm-.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.764] GetFileType (hFile=0x78c) returned 0x1 [0126.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.764] GetFileType (hFile=0x78c) returned 0x1 [0126.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp.P4WN3D", lpFilePart=0x0) returned 0x36 [0126.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\l4jm-.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.765] GetFileType (hFile=0x788) returned 0x1 [0126.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.765] GetFileType (hFile=0x788) returned 0x1 [0126.765] SetEndOfFile (hFile=0x788) returned 1 [0126.765] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x967a [0126.765] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.767] WriteFile (in: hFile=0x788, lpBuffer=0x2c05ac0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c05ac0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.769] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.770] WriteFile (in: hFile=0x788, lpBuffer=0x2c06acc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c06acc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.770] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.770] WriteFile (in: hFile=0x788, lpBuffer=0x2c07ad8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c07ad8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.771] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.771] WriteFile (in: hFile=0x788, lpBuffer=0x2c08ae4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c08ae4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.772] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.772] WriteFile (in: hFile=0x788, lpBuffer=0x2c09af0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c09af0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.772] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.773] WriteFile (in: hFile=0x788, lpBuffer=0x2c0aafc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0aafc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.773] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.773] WriteFile (in: hFile=0x788, lpBuffer=0x2c0bb08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0bb08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.773] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.774] WriteFile (in: hFile=0x788, lpBuffer=0x2c0cb14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0cb14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.774] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.774] WriteFile (in: hFile=0x788, lpBuffer=0x2c0db20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0db20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.775] ReadFile (in: hFile=0x78c, lpBuffer=0x2c04670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c04670*, lpNumberOfBytesRead=0xb3f1fc*=0x67a, lpOverlapped=0x0) returned 1 [0126.775] WriteFile (in: hFile=0x788, lpBuffer=0x2c0f1a8*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0f1a8*, lpNumberOfBytesWritten=0xb3f1b4*=0x680, lpOverlapped=0x0) returned 1 [0126.775] CloseHandle (hObject=0x788) returned 1 [0126.781] CloseHandle (hObject=0x78c) returned 1 [0126.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp", lpFilePart=0x0) returned 0x2f [0126.784] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\L4Jm-.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\l4jm-.bmp")) returned 1 [0126.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg", lpFilePart=0x0) returned 0x2f [0126.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\luvtp.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0126.836] GetFileType (hFile=0x78c) returned 0x1 [0126.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.836] GetFileType (hFile=0x78c) returned 0x1 [0126.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg.P4WN3D", lpFilePart=0x0) returned 0x36 [0126.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0126.836] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\luvtp.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0126.836] GetFileType (hFile=0x788) returned 0x1 [0126.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0126.837] GetFileType (hFile=0x788) returned 0x1 [0126.837] SetEndOfFile (hFile=0x788) returned 1 [0126.837] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x7fa8 [0126.838] ReadFile (in: hFile=0x78c, lpBuffer=0x2c10f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c10f1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.839] WriteFile (in: hFile=0x788, lpBuffer=0x2c1236c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1236c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.840] ReadFile (in: hFile=0x78c, lpBuffer=0x2c10f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c10f1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.841] WriteFile (in: hFile=0x788, lpBuffer=0x2c13378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c13378*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.841] ReadFile (in: hFile=0x78c, lpBuffer=0x2c10f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c10f1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.841] WriteFile (in: hFile=0x788, lpBuffer=0x2c14384*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c14384*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.842] ReadFile (in: hFile=0x78c, lpBuffer=0x2c10f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c10f1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.842] WriteFile (in: hFile=0x788, lpBuffer=0x2c15390*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c15390*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.842] ReadFile (in: hFile=0x78c, lpBuffer=0x2c10f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c10f1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.843] WriteFile (in: hFile=0x788, lpBuffer=0x2c1639c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1639c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.843] ReadFile (in: hFile=0x78c, lpBuffer=0x2c10f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c10f1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.843] WriteFile (in: hFile=0x788, lpBuffer=0x2c173a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c173a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.844] ReadFile (in: hFile=0x78c, lpBuffer=0x2c10f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c10f1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0126.894] WriteFile (in: hFile=0x788, lpBuffer=0x2c183b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c183b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0126.895] ReadFile (in: hFile=0x78c, lpBuffer=0x2c10f1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c10f1c*, lpNumberOfBytesRead=0xb3f1fc*=0xfa8, lpOverlapped=0x0) returned 1 [0126.895] WriteFile (in: hFile=0x788, lpBuffer=0x2c1a36c*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c1a36c*, lpNumberOfBytesWritten=0xb3f1b4*=0xfb0, lpOverlapped=0x0) returned 1 [0126.896] CloseHandle (hObject=0x788) returned 1 [0126.904] CloseHandle (hObject=0x78c) returned 1 [0126.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg", lpFilePart=0x0) returned 0x2f [0126.907] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\lUVTp.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\luvtp.jpg")) returned 1 [0127.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif", lpFilePart=0x0) returned 0x2e [0127.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\m2oq.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0127.009] GetFileType (hFile=0x78c) returned 0x1 [0127.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.009] GetFileType (hFile=0x78c) returned 0x1 [0127.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif.P4WN3D", lpFilePart=0x0) returned 0x35 [0127.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\m2oq.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0127.038] GetFileType (hFile=0x788) returned 0x1 [0127.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.038] GetFileType (hFile=0x788) returned 0x1 [0127.038] SetEndOfFile (hFile=0x788) returned 1 [0127.038] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x11066 [0127.039] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.040] WriteFile (in: hFile=0x788, lpBuffer=0x2c1d524*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1d524*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.041] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.042] WriteFile (in: hFile=0x788, lpBuffer=0x2c1e530*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1e530*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.042] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.042] WriteFile (in: hFile=0x788, lpBuffer=0x2c1f53c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1f53c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.043] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.043] WriteFile (in: hFile=0x788, lpBuffer=0x2c20548*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c20548*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.043] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.044] WriteFile (in: hFile=0x788, lpBuffer=0x2c21554*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c21554*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.044] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.044] WriteFile (in: hFile=0x788, lpBuffer=0x2c22560*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c22560*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.045] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.045] WriteFile (in: hFile=0x788, lpBuffer=0x2c2356c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2356c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.045] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.045] WriteFile (in: hFile=0x788, lpBuffer=0x2c24578*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c24578*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.046] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.046] WriteFile (in: hFile=0x788, lpBuffer=0x2c25584*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c25584*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.046] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.047] WriteFile (in: hFile=0x788, lpBuffer=0x2c26590*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c26590*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.047] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.047] WriteFile (in: hFile=0x788, lpBuffer=0x2c2759c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2759c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.048] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.048] WriteFile (in: hFile=0x788, lpBuffer=0x2c285a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c285a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.048] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.049] WriteFile (in: hFile=0x788, lpBuffer=0x2c295b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c295b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.049] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.049] WriteFile (in: hFile=0x788, lpBuffer=0x2c2a5c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2a5c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.049] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.050] WriteFile (in: hFile=0x788, lpBuffer=0x2c2b5cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2b5cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.050] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.050] WriteFile (in: hFile=0x788, lpBuffer=0x2c2c5d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2c5d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.051] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.051] WriteFile (in: hFile=0x788, lpBuffer=0x2c2d5e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2d5e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.051] ReadFile (in: hFile=0x78c, lpBuffer=0x2c1c0d4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c1c0d4*, lpNumberOfBytesRead=0xb3f1fc*=0x66, lpOverlapped=0x0) returned 1 [0127.052] WriteFile (in: hFile=0x788, lpBuffer=0x2c2e65c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c2e65c*, lpNumberOfBytesWritten=0xb3f1b4*=0x70, lpOverlapped=0x0) returned 1 [0127.052] CloseHandle (hObject=0x788) returned 1 [0127.056] CloseHandle (hObject=0x78c) returned 1 [0127.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif", lpFilePart=0x0) returned 0x2e [0127.059] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\m2oQ.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\m2oq.gif")) returned 1 [0127.168] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png", lpFilePart=0x0) returned 0x37 [0127.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\um4mucefd0wmz.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0127.169] GetFileType (hFile=0x78c) returned 0x1 [0127.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.169] GetFileType (hFile=0x78c) returned 0x1 [0127.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png.P4WN3D", lpFilePart=0x0) returned 0x3e [0127.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\um4mucefd0wmz.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0127.170] GetFileType (hFile=0x788) returned 0x1 [0127.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.170] GetFileType (hFile=0x788) returned 0x1 [0127.170] SetEndOfFile (hFile=0x788) returned 1 [0127.170] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x952d [0127.171] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.172] WriteFile (in: hFile=0x788, lpBuffer=0x2c31874*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c31874*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.174] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.174] WriteFile (in: hFile=0x788, lpBuffer=0x2c32880*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c32880*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.174] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.175] WriteFile (in: hFile=0x788, lpBuffer=0x2c3388c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3388c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.175] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.175] WriteFile (in: hFile=0x788, lpBuffer=0x2c34898*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c34898*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.175] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.176] WriteFile (in: hFile=0x788, lpBuffer=0x2c358a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c358a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.176] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.176] WriteFile (in: hFile=0x788, lpBuffer=0x2c368b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c368b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.177] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.177] WriteFile (in: hFile=0x788, lpBuffer=0x2c378bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c378bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.177] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.178] WriteFile (in: hFile=0x788, lpBuffer=0x2c388c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c388c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.178] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.178] WriteFile (in: hFile=0x788, lpBuffer=0x2c398d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c398d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.178] ReadFile (in: hFile=0x78c, lpBuffer=0x2c30424, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c30424*, lpNumberOfBytesRead=0xb3f1fc*=0x52d, lpOverlapped=0x0) returned 1 [0127.179] WriteFile (in: hFile=0x788, lpBuffer=0x2c3ae0c*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c3ae0c*, lpNumberOfBytesWritten=0xb3f1b4*=0x530, lpOverlapped=0x0) returned 1 [0127.179] CloseHandle (hObject=0x788) returned 1 [0127.181] CloseHandle (hObject=0x78c) returned 1 [0127.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png", lpFilePart=0x0) returned 0x37 [0127.184] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\uM4MUCefD0Wmz.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\um4mucefd0wmz.png")) returned 1 [0127.301] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png", lpFilePart=0x0) returned 0x38 [0127.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\v 68bszobis 8t.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0127.302] GetFileType (hFile=0x78c) returned 0x1 [0127.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.302] GetFileType (hFile=0x78c) returned 0x1 [0127.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png.P4WN3D", lpFilePart=0x0) returned 0x3f [0127.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\v 68bszobis 8t.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0127.303] GetFileType (hFile=0x788) returned 0x1 [0127.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.303] GetFileType (hFile=0x788) returned 0x1 [0127.303] SetEndOfFile (hFile=0x788) returned 1 [0127.303] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x2357 [0127.304] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3cbf4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3cbf4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.305] WriteFile (in: hFile=0x788, lpBuffer=0x2c3e044*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3e044*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.306] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3cbf4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3cbf4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.307] WriteFile (in: hFile=0x788, lpBuffer=0x2c3f050*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3f050*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.307] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3cbf4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3cbf4*, lpNumberOfBytesRead=0xb3f1fc*=0x357, lpOverlapped=0x0) returned 1 [0127.308] WriteFile (in: hFile=0x788, lpBuffer=0x2c403b8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c403b8*, lpNumberOfBytesWritten=0xb3f1b4*=0x360, lpOverlapped=0x0) returned 1 [0127.308] CloseHandle (hObject=0x788) returned 1 [0127.473] CloseHandle (hObject=0x78c) returned 1 [0127.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png", lpFilePart=0x0) returned 0x38 [0127.476] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\v 68BszOBIs 8t.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\v 68bszobis 8t.png")) returned 1 [0127.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg", lpFilePart=0x0) returned 0x32 [0127.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\w1pr_afv.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0127.499] GetFileType (hFile=0x78c) returned 0x1 [0127.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.499] GetFileType (hFile=0x78c) returned 0x1 [0127.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg.P4WN3D", lpFilePart=0x0) returned 0x39 [0127.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.500] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\w1pr_afv.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0127.500] GetFileType (hFile=0x788) returned 0x1 [0127.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.500] GetFileType (hFile=0x788) returned 0x1 [0127.500] SetEndOfFile (hFile=0x788) returned 1 [0127.598] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x6e78 [0127.598] ReadFile (in: hFile=0x78c, lpBuffer=0x2c42174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c42174*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.600] WriteFile (in: hFile=0x788, lpBuffer=0x2c435c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c435c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.601] ReadFile (in: hFile=0x78c, lpBuffer=0x2c42174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c42174*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.602] WriteFile (in: hFile=0x788, lpBuffer=0x2c445d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c445d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.602] ReadFile (in: hFile=0x78c, lpBuffer=0x2c42174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c42174*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.602] WriteFile (in: hFile=0x788, lpBuffer=0x2c455dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c455dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.603] ReadFile (in: hFile=0x78c, lpBuffer=0x2c42174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c42174*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.603] WriteFile (in: hFile=0x788, lpBuffer=0x2c465e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c465e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.603] ReadFile (in: hFile=0x78c, lpBuffer=0x2c42174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c42174*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.604] WriteFile (in: hFile=0x788, lpBuffer=0x2c475f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c475f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.604] ReadFile (in: hFile=0x78c, lpBuffer=0x2c42174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c42174*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.604] WriteFile (in: hFile=0x788, lpBuffer=0x2c48600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c48600*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.605] ReadFile (in: hFile=0x78c, lpBuffer=0x2c42174, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c42174*, lpNumberOfBytesRead=0xb3f1fc*=0xe78, lpOverlapped=0x0) returned 1 [0127.605] WriteFile (in: hFile=0x788, lpBuffer=0x2c4a488*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c4a488*, lpNumberOfBytesWritten=0xb3f1b4*=0xe80, lpOverlapped=0x0) returned 1 [0127.605] CloseHandle (hObject=0x788) returned 1 [0127.609] CloseHandle (hObject=0x78c) returned 1 [0127.612] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg", lpFilePart=0x0) returned 0x32 [0127.612] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\W1Pr_afv.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\w1pr_afv.jpg")) returned 1 [0127.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png", lpFilePart=0x0) returned 0x30 [0127.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\_9frra.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0127.679] GetFileType (hFile=0x78c) returned 0x1 [0127.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.679] GetFileType (hFile=0x78c) returned 0x1 [0127.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png.P4WN3D", lpFilePart=0x0) returned 0x37 [0127.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0127.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\_9frra.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0127.680] GetFileType (hFile=0x788) returned 0x1 [0127.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0127.680] GetFileType (hFile=0x788) returned 0x1 [0127.680] SetEndOfFile (hFile=0x788) returned 1 [0127.685] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xa2b2 [0127.685] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.687] WriteFile (in: hFile=0x788, lpBuffer=0x2c4d664*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4d664*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.740] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.740] WriteFile (in: hFile=0x788, lpBuffer=0x2c4e670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4e670*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.740] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.741] WriteFile (in: hFile=0x788, lpBuffer=0x2c4f67c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4f67c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.741] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.741] WriteFile (in: hFile=0x788, lpBuffer=0x2c50688*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c50688*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.742] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.742] WriteFile (in: hFile=0x788, lpBuffer=0x2c51694*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c51694*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.743] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.743] WriteFile (in: hFile=0x788, lpBuffer=0x2c526a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c526a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.743] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.744] WriteFile (in: hFile=0x788, lpBuffer=0x2c536ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c536ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.744] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.744] WriteFile (in: hFile=0x788, lpBuffer=0x2c546b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c546b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.744] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.745] WriteFile (in: hFile=0x788, lpBuffer=0x2c556c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c556c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.745] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0127.745] WriteFile (in: hFile=0x788, lpBuffer=0x2c566d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c566d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0127.746] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4c214, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4c214*, lpNumberOfBytesRead=0xb3f1fc*=0x2b2, lpOverlapped=0x0) returned 1 [0127.746] WriteFile (in: hFile=0x788, lpBuffer=0x2c57998*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c57998*, lpNumberOfBytesWritten=0xb3f1b4*=0x2c0, lpOverlapped=0x0) returned 1 [0127.746] CloseHandle (hObject=0x788) returned 1 [0127.766] CloseHandle (hObject=0x78c) returned 1 [0127.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png", lpFilePart=0x0) returned 0x30 [0127.781] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\bmWV31z5uQ 5\\_9FRra.png" (normalized: "c:\\users\\fd1hvy\\pictures\\bmwv31z5uq 5\\_9frra.png")) returned 1 [0127.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0127.850] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0127.851] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.851] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0127.851] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0127.851] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0127.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0127.852] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0127.852] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.852] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0127.853] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.853] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0127.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.854] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NetHood", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NetHood", lpFilePart=0x0) returned 0x17 [0127.854] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\NetHood\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0127.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\My Documents", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\My Documents", lpFilePart=0x0) returned 0x1c [0127.858] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\My Documents\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0127.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0127.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.861] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15 [0127.861] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe68dc973, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe68dc973, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.862] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe68dc973, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe68dc973, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.862] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30eacce0, ftCreationTime.dwHighDateTime=0x1d5ee7b, ftLastAccessTime.dwLowDateTime=0x27900a70, ftLastAccessTime.dwHighDateTime=0x1d5f0f6, ftLastWriteTime.dwLowDateTime=0x27900a70, ftLastWriteTime.dwHighDateTime=0x1d5f0f6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3vC1NUCoGnv7y", cAlternateFileName="3VC1NU~1")) returned 1 [0127.862] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9e355f0, ftCreationTime.dwHighDateTime=0x1d5ebaf, ftLastAccessTime.dwLowDateTime=0x440f0b70, ftLastAccessTime.dwHighDateTime=0x1d5f00f, ftLastWriteTime.dwLowDateTime=0x440f0b70, ftLastWriteTime.dwHighDateTime=0x1d5f00f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBM8yWHjG4UwvnSmk8", cAlternateFileName="BBM8YW~1")) returned 1 [0127.863] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0127.863] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c0e1d0, ftCreationTime.dwHighDateTime=0x1d5e6be, ftLastAccessTime.dwLowDateTime=0x8ce17a90, ftLastAccessTime.dwHighDateTime=0x1d5eb3c, ftLastWriteTime.dwLowDateTime=0x8ce17a90, ftLastWriteTime.dwHighDateTime=0x1d5eb3c, nFileSizeHigh=0x0, nFileSizeLow=0x17f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="mt-nS.wav", cAlternateFileName="")) returned 1 [0127.863] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30cc970, ftCreationTime.dwHighDateTime=0x1d5e925, ftLastAccessTime.dwLowDateTime=0xf71a9040, ftLastAccessTime.dwHighDateTime=0x1d5e272, ftLastWriteTime.dwLowDateTime=0xf71a9040, ftLastWriteTime.dwHighDateTime=0x1d5e272, nFileSizeHigh=0x0, nFileSizeLow=0xa67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="s-kYVF3EXq2J.wav", cAlternateFileName="S-KYVF~1.WAV")) returned 1 [0127.863] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97be3190, ftCreationTime.dwHighDateTime=0x1d5e46d, ftLastAccessTime.dwLowDateTime=0x2481ab30, ftLastAccessTime.dwHighDateTime=0x1d5ecd3, ftLastWriteTime.dwLowDateTime=0x2481ab30, ftLastWriteTime.dwHighDateTime=0x1d5ecd3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="V5tiehiQK", cAlternateFileName="V5TIEH~1")) returned 1 [0127.863] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.864] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15 [0127.864] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe68dc973, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe68dc973, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0127.864] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe68dc973, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe68dc973, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.865] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30eacce0, ftCreationTime.dwHighDateTime=0x1d5ee7b, ftLastAccessTime.dwLowDateTime=0x27900a70, ftLastAccessTime.dwHighDateTime=0x1d5f0f6, ftLastWriteTime.dwLowDateTime=0x27900a70, ftLastWriteTime.dwHighDateTime=0x1d5f0f6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3vC1NUCoGnv7y", cAlternateFileName="3VC1NU~1")) returned 1 [0127.865] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9e355f0, ftCreationTime.dwHighDateTime=0x1d5ebaf, ftLastAccessTime.dwLowDateTime=0x440f0b70, ftLastAccessTime.dwHighDateTime=0x1d5f00f, ftLastWriteTime.dwLowDateTime=0x440f0b70, ftLastWriteTime.dwHighDateTime=0x1d5f00f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BBM8yWHjG4UwvnSmk8", cAlternateFileName="BBM8YW~1")) returned 1 [0127.865] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0127.865] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7c0e1d0, ftCreationTime.dwHighDateTime=0x1d5e6be, ftLastAccessTime.dwLowDateTime=0x8ce17a90, ftLastAccessTime.dwHighDateTime=0x1d5eb3c, ftLastWriteTime.dwLowDateTime=0x8ce17a90, ftLastWriteTime.dwHighDateTime=0x1d5eb3c, nFileSizeHigh=0x0, nFileSizeLow=0x17f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="mt-nS.wav", cAlternateFileName="")) returned 1 [0127.865] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd30cc970, ftCreationTime.dwHighDateTime=0x1d5e925, ftLastAccessTime.dwLowDateTime=0xf71a9040, ftLastAccessTime.dwHighDateTime=0x1d5e272, ftLastWriteTime.dwLowDateTime=0xf71a9040, ftLastWriteTime.dwHighDateTime=0x1d5e272, nFileSizeHigh=0x0, nFileSizeLow=0xa67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="s-kYVF3EXq2J.wav", cAlternateFileName="S-KYVF~1.WAV")) returned 1 [0127.865] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97be3190, ftCreationTime.dwHighDateTime=0x1d5e46d, ftLastAccessTime.dwLowDateTime=0x2481ab30, ftLastAccessTime.dwHighDateTime=0x1d5ecd3, ftLastWriteTime.dwLowDateTime=0x2481ab30, ftLastWriteTime.dwHighDateTime=0x1d5ecd3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="V5tiehiQK", cAlternateFileName="V5TIEH~1")) returned 1 [0127.866] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97be3190, ftCreationTime.dwHighDateTime=0x1d5e46d, ftLastAccessTime.dwLowDateTime=0x2481ab30, ftLastAccessTime.dwHighDateTime=0x1d5ecd3, ftLastWriteTime.dwLowDateTime=0x2481ab30, ftLastWriteTime.dwHighDateTime=0x1d5ecd3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="V5tiehiQK", cAlternateFileName="V5TIEH~1")) returned 0 [0127.866] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0127.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK", lpFilePart=0x0) returned 0x1f [0127.868] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97be3190, ftCreationTime.dwHighDateTime=0x1d5e46d, ftLastAccessTime.dwLowDateTime=0x2481ab30, ftLastAccessTime.dwHighDateTime=0x1d5ecd3, ftLastWriteTime.dwLowDateTime=0x2481ab30, ftLastWriteTime.dwHighDateTime=0x1d5ecd3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.869] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97be3190, ftCreationTime.dwHighDateTime=0x1d5e46d, ftLastAccessTime.dwLowDateTime=0x2481ab30, ftLastAccessTime.dwHighDateTime=0x1d5ecd3, ftLastWriteTime.dwLowDateTime=0x2481ab30, ftLastWriteTime.dwHighDateTime=0x1d5ecd3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.869] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16c0dd10, ftCreationTime.dwHighDateTime=0x1d5e2f9, ftLastAccessTime.dwLowDateTime=0x232dfd70, ftLastAccessTime.dwHighDateTime=0x1d5efc5, ftLastWriteTime.dwLowDateTime=0x232dfd70, ftLastWriteTime.dwHighDateTime=0x1d5efc5, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2aK8QSrRGSL_CiFmiVK.mp3", cAlternateFileName="2AK8QS~1.MP3")) returned 1 [0127.869] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49efa790, ftCreationTime.dwHighDateTime=0x1d5f08f, ftLastAccessTime.dwLowDateTime=0xd49574d0, ftLastAccessTime.dwHighDateTime=0x1d5f042, ftLastWriteTime.dwLowDateTime=0xd49574d0, ftLastWriteTime.dwHighDateTime=0x1d5f042, nFileSizeHigh=0x0, nFileSizeLow=0x1864a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eas08ftN.mp3", cAlternateFileName="")) returned 1 [0127.869] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1526ac10, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0x457438b0, ftLastAccessTime.dwHighDateTime=0x1d5eeba, ftLastWriteTime.dwLowDateTime=0x457438b0, ftLastWriteTime.dwHighDateTime=0x1d5eeba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RxrYZWwYcDte0c1o6", cAlternateFileName="RXRYZW~1")) returned 1 [0127.869] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3ebca0, ftCreationTime.dwHighDateTime=0x1d5e23e, ftLastAccessTime.dwLowDateTime=0x4de5590, ftLastAccessTime.dwHighDateTime=0x1d5eb92, ftLastWriteTime.dwLowDateTime=0x4de5590, ftLastWriteTime.dwHighDateTime=0x1d5eb92, nFileSizeHigh=0x0, nFileSizeLow=0x16f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJ2Mz jksz0kN.wav", cAlternateFileName="YJ2MZJ~1.WAV")) returned 1 [0127.870] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a5ca060, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x72126b90, ftLastAccessTime.dwHighDateTime=0x1d5e946, ftLastWriteTime.dwLowDateTime=0x72126b90, ftLastWriteTime.dwHighDateTime=0x1d5e946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_GT", cAlternateFileName="")) returned 1 [0127.870] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.870] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK", lpFilePart=0x0) returned 0x1f [0127.871] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97be3190, ftCreationTime.dwHighDateTime=0x1d5e46d, ftLastAccessTime.dwLowDateTime=0x2481ab30, ftLastAccessTime.dwHighDateTime=0x1d5ecd3, ftLastWriteTime.dwLowDateTime=0x2481ab30, ftLastWriteTime.dwHighDateTime=0x1d5ecd3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.871] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97be3190, ftCreationTime.dwHighDateTime=0x1d5e46d, ftLastAccessTime.dwLowDateTime=0x2481ab30, ftLastAccessTime.dwHighDateTime=0x1d5ecd3, ftLastWriteTime.dwLowDateTime=0x2481ab30, ftLastWriteTime.dwHighDateTime=0x1d5ecd3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.871] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16c0dd10, ftCreationTime.dwHighDateTime=0x1d5e2f9, ftLastAccessTime.dwLowDateTime=0x232dfd70, ftLastAccessTime.dwHighDateTime=0x1d5efc5, ftLastWriteTime.dwLowDateTime=0x232dfd70, ftLastWriteTime.dwHighDateTime=0x1d5efc5, nFileSizeHigh=0x0, nFileSizeLow=0x1df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2aK8QSrRGSL_CiFmiVK.mp3", cAlternateFileName="2AK8QS~1.MP3")) returned 1 [0127.871] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49efa790, ftCreationTime.dwHighDateTime=0x1d5f08f, ftLastAccessTime.dwLowDateTime=0xd49574d0, ftLastAccessTime.dwHighDateTime=0x1d5f042, ftLastWriteTime.dwLowDateTime=0xd49574d0, ftLastWriteTime.dwHighDateTime=0x1d5f042, nFileSizeHigh=0x0, nFileSizeLow=0x1864a, dwReserved0=0x0, dwReserved1=0x0, cFileName="eas08ftN.mp3", cAlternateFileName="")) returned 1 [0127.871] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1526ac10, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0x457438b0, ftLastAccessTime.dwHighDateTime=0x1d5eeba, ftLastWriteTime.dwLowDateTime=0x457438b0, ftLastWriteTime.dwHighDateTime=0x1d5eeba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RxrYZWwYcDte0c1o6", cAlternateFileName="RXRYZW~1")) returned 1 [0127.872] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d3ebca0, ftCreationTime.dwHighDateTime=0x1d5e23e, ftLastAccessTime.dwLowDateTime=0x4de5590, ftLastAccessTime.dwHighDateTime=0x1d5eb92, ftLastWriteTime.dwLowDateTime=0x4de5590, ftLastWriteTime.dwHighDateTime=0x1d5eb92, nFileSizeHigh=0x0, nFileSizeLow=0x16f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="yJ2Mz jksz0kN.wav", cAlternateFileName="YJ2MZJ~1.WAV")) returned 1 [0127.872] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a5ca060, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x72126b90, ftLastAccessTime.dwHighDateTime=0x1d5e946, ftLastWriteTime.dwLowDateTime=0x72126b90, ftLastWriteTime.dwHighDateTime=0x1d5e946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_GT", cAlternateFileName="")) returned 1 [0127.872] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a5ca060, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x72126b90, ftLastAccessTime.dwHighDateTime=0x1d5e946, ftLastWriteTime.dwLowDateTime=0x72126b90, ftLastWriteTime.dwHighDateTime=0x1d5e946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_GT", cAlternateFileName="")) returned 0 [0127.872] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\_GT", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\_GT", lpFilePart=0x0) returned 0x23 [0127.874] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\_GT\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a5ca060, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x72126b90, ftLastAccessTime.dwHighDateTime=0x1d5e946, ftLastWriteTime.dwLowDateTime=0x72126b90, ftLastWriteTime.dwHighDateTime=0x1d5e946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.875] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a5ca060, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x72126b90, ftLastAccessTime.dwHighDateTime=0x1d5e946, ftLastWriteTime.dwLowDateTime=0x72126b90, ftLastWriteTime.dwHighDateTime=0x1d5e946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.875] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x691cc880, ftCreationTime.dwHighDateTime=0x1d5e81c, ftLastAccessTime.dwLowDateTime=0x2b1f6600, ftLastAccessTime.dwHighDateTime=0x1d5ee75, ftLastWriteTime.dwLowDateTime=0x2b1f6600, ftLastWriteTime.dwHighDateTime=0x1d5ee75, nFileSizeHigh=0x0, nFileSizeLow=0x177cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="8_dr5g FzcS.m4a", cAlternateFileName="8_DR5G~1.M4A")) returned 1 [0127.875] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596c8310, ftCreationTime.dwHighDateTime=0x1d5ea4e, ftLastAccessTime.dwLowDateTime=0x4b4fd790, ftLastAccessTime.dwHighDateTime=0x1d5ee91, ftLastWriteTime.dwLowDateTime=0x4b4fd790, ftLastWriteTime.dwHighDateTime=0x1d5ee91, nFileSizeHigh=0x0, nFileSizeLow=0x2176, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jc1uOV3 wO9.wav", cAlternateFileName="JC1UOV~1.WAV")) returned 1 [0127.876] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9cbb4c0, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0x6dc6e720, ftLastAccessTime.dwHighDateTime=0x1d5e9b2, ftLastWriteTime.dwLowDateTime=0x6dc6e720, ftLastWriteTime.dwHighDateTime=0x1d5e9b2, nFileSizeHigh=0x0, nFileSizeLow=0xb49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sfuVqV5.m4a", cAlternateFileName="")) returned 1 [0127.876] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb795c30, ftCreationTime.dwHighDateTime=0x1d5eae6, ftLastAccessTime.dwLowDateTime=0xd8472b90, ftLastAccessTime.dwHighDateTime=0x1d5e4a4, ftLastWriteTime.dwLowDateTime=0xd8472b90, ftLastWriteTime.dwHighDateTime=0x1d5e4a4, nFileSizeHigh=0x0, nFileSizeLow=0x1223c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vfvYpq6.m4a", cAlternateFileName="")) returned 1 [0127.876] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb795c30, ftCreationTime.dwHighDateTime=0x1d5eae6, ftLastAccessTime.dwLowDateTime=0xd8472b90, ftLastAccessTime.dwHighDateTime=0x1d5e4a4, ftLastWriteTime.dwLowDateTime=0xd8472b90, ftLastWriteTime.dwHighDateTime=0x1d5e4a4, nFileSizeHigh=0x0, nFileSizeLow=0x1223c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vfvYpq6.m4a", cAlternateFileName="")) returned 0 [0127.876] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\_GT", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\_GT", lpFilePart=0x0) returned 0x23 [0127.877] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\_GT\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a5ca060, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x72126b90, ftLastAccessTime.dwHighDateTime=0x1d5e946, ftLastWriteTime.dwLowDateTime=0x72126b90, ftLastWriteTime.dwHighDateTime=0x1d5e946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.877] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2a5ca060, ftCreationTime.dwHighDateTime=0x1d5e17e, ftLastAccessTime.dwLowDateTime=0x72126b90, ftLastAccessTime.dwHighDateTime=0x1d5e946, ftLastWriteTime.dwLowDateTime=0x72126b90, ftLastWriteTime.dwHighDateTime=0x1d5e946, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.877] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x691cc880, ftCreationTime.dwHighDateTime=0x1d5e81c, ftLastAccessTime.dwLowDateTime=0x2b1f6600, ftLastAccessTime.dwHighDateTime=0x1d5ee75, ftLastWriteTime.dwLowDateTime=0x2b1f6600, ftLastWriteTime.dwHighDateTime=0x1d5ee75, nFileSizeHigh=0x0, nFileSizeLow=0x177cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="8_dr5g FzcS.m4a", cAlternateFileName="8_DR5G~1.M4A")) returned 1 [0127.877] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x596c8310, ftCreationTime.dwHighDateTime=0x1d5ea4e, ftLastAccessTime.dwLowDateTime=0x4b4fd790, ftLastAccessTime.dwHighDateTime=0x1d5ee91, ftLastWriteTime.dwLowDateTime=0x4b4fd790, ftLastWriteTime.dwHighDateTime=0x1d5ee91, nFileSizeHigh=0x0, nFileSizeLow=0x2176, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jc1uOV3 wO9.wav", cAlternateFileName="JC1UOV~1.WAV")) returned 1 [0127.878] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9cbb4c0, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0x6dc6e720, ftLastAccessTime.dwHighDateTime=0x1d5e9b2, ftLastWriteTime.dwLowDateTime=0x6dc6e720, ftLastWriteTime.dwHighDateTime=0x1d5e9b2, nFileSizeHigh=0x0, nFileSizeLow=0xb49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sfuVqV5.m4a", cAlternateFileName="")) returned 1 [0127.878] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb795c30, ftCreationTime.dwHighDateTime=0x1d5eae6, ftLastAccessTime.dwLowDateTime=0xd8472b90, ftLastAccessTime.dwHighDateTime=0x1d5e4a4, ftLastWriteTime.dwLowDateTime=0xd8472b90, ftLastWriteTime.dwHighDateTime=0x1d5e4a4, nFileSizeHigh=0x0, nFileSizeLow=0x1223c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vfvYpq6.m4a", cAlternateFileName="")) returned 1 [0127.878] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.878] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6", lpFilePart=0x0) returned 0x31 [0127.881] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1526ac10, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0x457438b0, ftLastAccessTime.dwHighDateTime=0x1d5eeba, ftLastWriteTime.dwLowDateTime=0x457438b0, ftLastWriteTime.dwHighDateTime=0x1d5eeba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0127.881] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1526ac10, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0x457438b0, ftLastAccessTime.dwHighDateTime=0x1d5eeba, ftLastWriteTime.dwLowDateTime=0x457438b0, ftLastWriteTime.dwHighDateTime=0x1d5eeba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.881] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b0894e0, ftCreationTime.dwHighDateTime=0x1d5edac, ftLastAccessTime.dwLowDateTime=0xc7186230, ftLastAccessTime.dwHighDateTime=0x1d5ec15, ftLastWriteTime.dwLowDateTime=0xc7186230, ftLastWriteTime.dwHighDateTime=0x1d5ec15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1z K9b", cAlternateFileName="1ZK9B~1")) returned 1 [0127.881] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41e23ca0, ftCreationTime.dwHighDateTime=0x1d5eaba, ftLastAccessTime.dwLowDateTime=0x9a1485e0, ftLastAccessTime.dwHighDateTime=0x1d5eac9, ftLastWriteTime.dwLowDateTime=0x9a1485e0, ftLastWriteTime.dwHighDateTime=0x1d5eac9, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="8TdSIEG hp.wav", cAlternateFileName="8TDSIE~1.WAV")) returned 1 [0127.882] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x829badc0, ftCreationTime.dwHighDateTime=0x1d5ed68, ftLastAccessTime.dwLowDateTime=0x496b5240, ftLastAccessTime.dwHighDateTime=0x1d5eda3, ftLastWriteTime.dwLowDateTime=0x496b5240, ftLastWriteTime.dwHighDateTime=0x1d5eda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A_Aarb ixhK7", cAlternateFileName="A_AARB~1")) returned 1 [0127.882] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc78a8e0, ftCreationTime.dwHighDateTime=0x1d5e1fc, ftLastAccessTime.dwLowDateTime=0x47b98890, ftLastAccessTime.dwHighDateTime=0x1d5e88a, ftLastWriteTime.dwLowDateTime=0x47b98890, ftLastWriteTime.dwHighDateTime=0x1d5e88a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eNRmL", cAlternateFileName="")) returned 1 [0127.882] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa967bd60, ftCreationTime.dwHighDateTime=0x1d5e398, ftLastAccessTime.dwLowDateTime=0x7973ae00, ftLastAccessTime.dwHighDateTime=0x1d5ef89, ftLastWriteTime.dwLowDateTime=0x7973ae00, ftLastWriteTime.dwHighDateTime=0x1d5ef89, nFileSizeHigh=0x0, nFileSizeLow=0xcbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="JqLn0A.m4a", cAlternateFileName="")) returned 1 [0127.882] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbbf0d0, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0xb712b550, ftLastAccessTime.dwHighDateTime=0x1d5ebcc, ftLastWriteTime.dwLowDateTime=0xb712b550, ftLastWriteTime.dwHighDateTime=0x1d5ebcc, nFileSizeHigh=0x0, nFileSizeLow=0x13020, dwReserved0=0x0, dwReserved1=0x0, cFileName="M PxLw3L3Tqr1y.wav", cAlternateFileName="MPXLW3~1.WAV")) returned 1 [0127.883] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5cf6980, ftCreationTime.dwHighDateTime=0x1d5eb62, ftLastAccessTime.dwLowDateTime=0x94ae1cb0, ftLastAccessTime.dwHighDateTime=0x1d5e4c0, ftLastWriteTime.dwLowDateTime=0x94ae1cb0, ftLastWriteTime.dwHighDateTime=0x1d5e4c0, nFileSizeHigh=0x0, nFileSizeLow=0xd23, dwReserved0=0x0, dwReserved1=0x0, cFileName="NC9q5gjbzgRLn7Ev4j.mp3", cAlternateFileName="NC9Q5G~1.MP3")) returned 1 [0127.883] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c386a20, ftCreationTime.dwHighDateTime=0x1d5ed7d, ftLastAccessTime.dwLowDateTime=0x94125ee0, ftLastAccessTime.dwHighDateTime=0x1d5e431, ftLastWriteTime.dwLowDateTime=0x94125ee0, ftLastWriteTime.dwHighDateTime=0x1d5e431, nFileSizeHigh=0x0, nFileSizeLow=0x521c, dwReserved0=0x0, dwReserved1=0x0, cFileName="x9CR0fW9.m4a", cAlternateFileName="")) returned 1 [0127.883] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c386a20, ftCreationTime.dwHighDateTime=0x1d5ed7d, ftLastAccessTime.dwLowDateTime=0x94125ee0, ftLastAccessTime.dwHighDateTime=0x1d5e431, ftLastWriteTime.dwLowDateTime=0x94125ee0, ftLastWriteTime.dwHighDateTime=0x1d5e431, nFileSizeHigh=0x0, nFileSizeLow=0x521c, dwReserved0=0x0, dwReserved1=0x0, cFileName="x9CR0fW9.m4a", cAlternateFileName="")) returned 0 [0127.883] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0127.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6", lpFilePart=0x0) returned 0x31 [0127.884] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1526ac10, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0x457438b0, ftLastAccessTime.dwHighDateTime=0x1d5eeba, ftLastWriteTime.dwLowDateTime=0x457438b0, ftLastWriteTime.dwHighDateTime=0x1d5eeba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.884] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1526ac10, ftCreationTime.dwHighDateTime=0x1d5e0eb, ftLastAccessTime.dwLowDateTime=0x457438b0, ftLastAccessTime.dwHighDateTime=0x1d5eeba, ftLastWriteTime.dwLowDateTime=0x457438b0, ftLastWriteTime.dwHighDateTime=0x1d5eeba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.884] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b0894e0, ftCreationTime.dwHighDateTime=0x1d5edac, ftLastAccessTime.dwLowDateTime=0xc7186230, ftLastAccessTime.dwHighDateTime=0x1d5ec15, ftLastWriteTime.dwLowDateTime=0xc7186230, ftLastWriteTime.dwHighDateTime=0x1d5ec15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1z K9b", cAlternateFileName="1ZK9B~1")) returned 1 [0127.885] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41e23ca0, ftCreationTime.dwHighDateTime=0x1d5eaba, ftLastAccessTime.dwLowDateTime=0x9a1485e0, ftLastAccessTime.dwHighDateTime=0x1d5eac9, ftLastWriteTime.dwLowDateTime=0x9a1485e0, ftLastWriteTime.dwHighDateTime=0x1d5eac9, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="8TdSIEG hp.wav", cAlternateFileName="8TDSIE~1.WAV")) returned 1 [0127.885] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x829badc0, ftCreationTime.dwHighDateTime=0x1d5ed68, ftLastAccessTime.dwLowDateTime=0x496b5240, ftLastAccessTime.dwHighDateTime=0x1d5eda3, ftLastWriteTime.dwLowDateTime=0x496b5240, ftLastWriteTime.dwHighDateTime=0x1d5eda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A_Aarb ixhK7", cAlternateFileName="A_AARB~1")) returned 1 [0127.885] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc78a8e0, ftCreationTime.dwHighDateTime=0x1d5e1fc, ftLastAccessTime.dwLowDateTime=0x47b98890, ftLastAccessTime.dwHighDateTime=0x1d5e88a, ftLastWriteTime.dwLowDateTime=0x47b98890, ftLastWriteTime.dwHighDateTime=0x1d5e88a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eNRmL", cAlternateFileName="")) returned 1 [0127.885] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa967bd60, ftCreationTime.dwHighDateTime=0x1d5e398, ftLastAccessTime.dwLowDateTime=0x7973ae00, ftLastAccessTime.dwHighDateTime=0x1d5ef89, ftLastWriteTime.dwLowDateTime=0x7973ae00, ftLastWriteTime.dwHighDateTime=0x1d5ef89, nFileSizeHigh=0x0, nFileSizeLow=0xcbd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="JqLn0A.m4a", cAlternateFileName="")) returned 1 [0127.885] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbbf0d0, ftCreationTime.dwHighDateTime=0x1d5e749, ftLastAccessTime.dwLowDateTime=0xb712b550, ftLastAccessTime.dwHighDateTime=0x1d5ebcc, ftLastWriteTime.dwLowDateTime=0xb712b550, ftLastWriteTime.dwHighDateTime=0x1d5ebcc, nFileSizeHigh=0x0, nFileSizeLow=0x13020, dwReserved0=0x0, dwReserved1=0x0, cFileName="M PxLw3L3Tqr1y.wav", cAlternateFileName="MPXLW3~1.WAV")) returned 1 [0127.886] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5cf6980, ftCreationTime.dwHighDateTime=0x1d5eb62, ftLastAccessTime.dwLowDateTime=0x94ae1cb0, ftLastAccessTime.dwHighDateTime=0x1d5e4c0, ftLastWriteTime.dwLowDateTime=0x94ae1cb0, ftLastWriteTime.dwHighDateTime=0x1d5e4c0, nFileSizeHigh=0x0, nFileSizeLow=0xd23, dwReserved0=0x0, dwReserved1=0x0, cFileName="NC9q5gjbzgRLn7Ev4j.mp3", cAlternateFileName="NC9Q5G~1.MP3")) returned 1 [0127.886] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c386a20, ftCreationTime.dwHighDateTime=0x1d5ed7d, ftLastAccessTime.dwLowDateTime=0x94125ee0, ftLastAccessTime.dwHighDateTime=0x1d5e431, ftLastWriteTime.dwLowDateTime=0x94125ee0, ftLastWriteTime.dwHighDateTime=0x1d5e431, nFileSizeHigh=0x0, nFileSizeLow=0x521c, dwReserved0=0x0, dwReserved1=0x0, cFileName="x9CR0fW9.m4a", cAlternateFileName="")) returned 1 [0127.886] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.886] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.889] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\eNRmL", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\eNRmL", lpFilePart=0x0) returned 0x37 [0127.889] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\eNRmL\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc78a8e0, ftCreationTime.dwHighDateTime=0x1d5e1fc, ftLastAccessTime.dwLowDateTime=0x47b98890, ftLastAccessTime.dwHighDateTime=0x1d5e88a, ftLastWriteTime.dwLowDateTime=0x47b98890, ftLastWriteTime.dwHighDateTime=0x1d5e88a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0127.890] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc78a8e0, ftCreationTime.dwHighDateTime=0x1d5e1fc, ftLastAccessTime.dwLowDateTime=0x47b98890, ftLastAccessTime.dwHighDateTime=0x1d5e88a, ftLastWriteTime.dwLowDateTime=0x47b98890, ftLastWriteTime.dwHighDateTime=0x1d5e88a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.890] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa767d270, ftCreationTime.dwHighDateTime=0x1d5edcf, ftLastAccessTime.dwLowDateTime=0x7d886cf0, ftLastAccessTime.dwHighDateTime=0x1d5e607, ftLastWriteTime.dwLowDateTime=0x7d886cf0, ftLastWriteTime.dwHighDateTime=0x1d5e607, nFileSizeHigh=0x0, nFileSizeLow=0xe290, dwReserved0=0x0, dwReserved1=0x0, cFileName="6gP3K0En4E3eEDVu.wav", cAlternateFileName="6GP3K0~1.WAV")) returned 1 [0127.890] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716205e0, ftCreationTime.dwHighDateTime=0x1d5e4e9, ftLastAccessTime.dwLowDateTime=0xbb06f1e0, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xbb06f1e0, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x70a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fO A1ui0q0JQm7R-liq.m4a", cAlternateFileName="FOA1UI~1.M4A")) returned 1 [0127.890] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866cf170, ftCreationTime.dwHighDateTime=0x1d5ee62, ftLastAccessTime.dwLowDateTime=0xad417ca0, ftLastAccessTime.dwHighDateTime=0x1d5e6ef, ftLastWriteTime.dwLowDateTime=0xad417ca0, ftLastWriteTime.dwHighDateTime=0x1d5e6ef, nFileSizeHigh=0x0, nFileSizeLow=0x14143, dwReserved0=0x0, dwReserved1=0x0, cFileName="peAp0Zn.m4a", cAlternateFileName="")) returned 1 [0127.891] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812ba340, ftCreationTime.dwHighDateTime=0x1d5ecc9, ftLastAccessTime.dwLowDateTime=0x6cc0fad0, ftLastAccessTime.dwHighDateTime=0x1d5f03f, ftLastWriteTime.dwLowDateTime=0x6cc0fad0, ftLastWriteTime.dwHighDateTime=0x1d5f03f, nFileSizeHigh=0x0, nFileSizeLow=0xc36a, dwReserved0=0x0, dwReserved1=0x0, cFileName="y1vh9l.mp3", cAlternateFileName="")) returned 1 [0127.970] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812ba340, ftCreationTime.dwHighDateTime=0x1d5ecc9, ftLastAccessTime.dwLowDateTime=0x6cc0fad0, ftLastAccessTime.dwHighDateTime=0x1d5f03f, ftLastWriteTime.dwLowDateTime=0x6cc0fad0, ftLastWriteTime.dwHighDateTime=0x1d5f03f, nFileSizeHigh=0x0, nFileSizeLow=0xc36a, dwReserved0=0x0, dwReserved1=0x0, cFileName="y1vh9l.mp3", cAlternateFileName="")) returned 0 [0127.970] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0127.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\eNRmL", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\eNRmL", lpFilePart=0x0) returned 0x37 [0127.970] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\eNRmL\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc78a8e0, ftCreationTime.dwHighDateTime=0x1d5e1fc, ftLastAccessTime.dwLowDateTime=0x47b98890, ftLastAccessTime.dwHighDateTime=0x1d5e88a, ftLastWriteTime.dwLowDateTime=0x47b98890, ftLastWriteTime.dwHighDateTime=0x1d5e88a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.971] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc78a8e0, ftCreationTime.dwHighDateTime=0x1d5e1fc, ftLastAccessTime.dwLowDateTime=0x47b98890, ftLastAccessTime.dwHighDateTime=0x1d5e88a, ftLastWriteTime.dwLowDateTime=0x47b98890, ftLastWriteTime.dwHighDateTime=0x1d5e88a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.971] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa767d270, ftCreationTime.dwHighDateTime=0x1d5edcf, ftLastAccessTime.dwLowDateTime=0x7d886cf0, ftLastAccessTime.dwHighDateTime=0x1d5e607, ftLastWriteTime.dwLowDateTime=0x7d886cf0, ftLastWriteTime.dwHighDateTime=0x1d5e607, nFileSizeHigh=0x0, nFileSizeLow=0xe290, dwReserved0=0x0, dwReserved1=0x0, cFileName="6gP3K0En4E3eEDVu.wav", cAlternateFileName="6GP3K0~1.WAV")) returned 1 [0127.971] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x716205e0, ftCreationTime.dwHighDateTime=0x1d5e4e9, ftLastAccessTime.dwLowDateTime=0xbb06f1e0, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0xbb06f1e0, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x70a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fO A1ui0q0JQm7R-liq.m4a", cAlternateFileName="FOA1UI~1.M4A")) returned 1 [0127.971] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x866cf170, ftCreationTime.dwHighDateTime=0x1d5ee62, ftLastAccessTime.dwLowDateTime=0xad417ca0, ftLastAccessTime.dwHighDateTime=0x1d5e6ef, ftLastWriteTime.dwLowDateTime=0xad417ca0, ftLastWriteTime.dwHighDateTime=0x1d5e6ef, nFileSizeHigh=0x0, nFileSizeLow=0x14143, dwReserved0=0x0, dwReserved1=0x0, cFileName="peAp0Zn.m4a", cAlternateFileName="")) returned 1 [0127.971] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x812ba340, ftCreationTime.dwHighDateTime=0x1d5ecc9, ftLastAccessTime.dwLowDateTime=0x6cc0fad0, ftLastAccessTime.dwHighDateTime=0x1d5f03f, ftLastWriteTime.dwLowDateTime=0x6cc0fad0, ftLastWriteTime.dwHighDateTime=0x1d5f03f, nFileSizeHigh=0x0, nFileSizeLow=0xc36a, dwReserved0=0x0, dwReserved1=0x0, cFileName="y1vh9l.mp3", cAlternateFileName="")) returned 1 [0127.971] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.972] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\A_Aarb ixhK7", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\A_Aarb ixhK7", lpFilePart=0x0) returned 0x3e [0127.981] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\A_Aarb ixhK7\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x829badc0, ftCreationTime.dwHighDateTime=0x1d5ed68, ftLastAccessTime.dwLowDateTime=0x496b5240, ftLastAccessTime.dwHighDateTime=0x1d5eda3, ftLastWriteTime.dwLowDateTime=0x496b5240, ftLastWriteTime.dwHighDateTime=0x1d5eda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0127.981] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x829badc0, ftCreationTime.dwHighDateTime=0x1d5ed68, ftLastAccessTime.dwLowDateTime=0x496b5240, ftLastAccessTime.dwHighDateTime=0x1d5eda3, ftLastWriteTime.dwLowDateTime=0x496b5240, ftLastWriteTime.dwHighDateTime=0x1d5eda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.981] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cc90590, ftCreationTime.dwHighDateTime=0x1d5e96b, ftLastAccessTime.dwLowDateTime=0xcaebc0, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xcaebc0, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x13a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="AJKU6c914.wav", cAlternateFileName="AJKU6C~1.WAV")) returned 1 [0127.981] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf627630, ftCreationTime.dwHighDateTime=0x1d5e652, ftLastAccessTime.dwLowDateTime=0xe88808a0, ftLastAccessTime.dwHighDateTime=0x1d5e84e, ftLastWriteTime.dwLowDateTime=0xe88808a0, ftLastWriteTime.dwHighDateTime=0x1d5e84e, nFileSizeHigh=0x0, nFileSizeLow=0xc05b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e3Bhd_Jr1 U0u.wav", cAlternateFileName="E3BHD_~1.WAV")) returned 1 [0127.982] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c3dc80, ftCreationTime.dwHighDateTime=0x1d5ed6f, ftLastAccessTime.dwLowDateTime=0x232ec5a0, ftLastAccessTime.dwHighDateTime=0x1d5e270, ftLastWriteTime.dwLowDateTime=0x232ec5a0, ftLastWriteTime.dwHighDateTime=0x1d5e270, nFileSizeHigh=0x0, nFileSizeLow=0x15de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LIT4 QUwh1.mp3", cAlternateFileName="LIT4QU~1.MP3")) returned 1 [0127.982] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fad920, ftCreationTime.dwHighDateTime=0x1d5ee69, ftLastAccessTime.dwLowDateTime=0x9d737e10, ftLastAccessTime.dwHighDateTime=0x1d5ef58, ftLastWriteTime.dwLowDateTime=0x9d737e10, ftLastWriteTime.dwHighDateTime=0x1d5ef58, nFileSizeHigh=0x0, nFileSizeLow=0xeb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="QT2UGKUA3pJwM.mp3", cAlternateFileName="QT2UGK~1.MP3")) returned 1 [0127.982] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7af0140, ftCreationTime.dwHighDateTime=0x1d5ef19, ftLastAccessTime.dwLowDateTime=0xdb707210, ftLastAccessTime.dwHighDateTime=0x1d5e533, ftLastWriteTime.dwLowDateTime=0xdb707210, ftLastWriteTime.dwHighDateTime=0x1d5e533, nFileSizeHigh=0x0, nFileSizeLow=0x8723, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmX2Z mORV.wav", cAlternateFileName="XMX2ZM~1.WAV")) returned 1 [0127.982] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7af0140, ftCreationTime.dwHighDateTime=0x1d5ef19, ftLastAccessTime.dwLowDateTime=0xdb707210, ftLastAccessTime.dwHighDateTime=0x1d5e533, ftLastWriteTime.dwLowDateTime=0xdb707210, ftLastWriteTime.dwHighDateTime=0x1d5e533, nFileSizeHigh=0x0, nFileSizeLow=0x8723, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmX2Z mORV.wav", cAlternateFileName="XMX2ZM~1.WAV")) returned 0 [0127.982] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0127.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\A_Aarb ixhK7", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\A_Aarb ixhK7", lpFilePart=0x0) returned 0x3e [0127.983] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\A_Aarb ixhK7\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x829badc0, ftCreationTime.dwHighDateTime=0x1d5ed68, ftLastAccessTime.dwLowDateTime=0x496b5240, ftLastAccessTime.dwHighDateTime=0x1d5eda3, ftLastWriteTime.dwLowDateTime=0x496b5240, ftLastWriteTime.dwHighDateTime=0x1d5eda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0127.983] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x829badc0, ftCreationTime.dwHighDateTime=0x1d5ed68, ftLastAccessTime.dwLowDateTime=0x496b5240, ftLastAccessTime.dwHighDateTime=0x1d5eda3, ftLastWriteTime.dwLowDateTime=0x496b5240, ftLastWriteTime.dwHighDateTime=0x1d5eda3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.983] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cc90590, ftCreationTime.dwHighDateTime=0x1d5e96b, ftLastAccessTime.dwLowDateTime=0xcaebc0, ftLastAccessTime.dwHighDateTime=0x1d5e274, ftLastWriteTime.dwLowDateTime=0xcaebc0, ftLastWriteTime.dwHighDateTime=0x1d5e274, nFileSizeHigh=0x0, nFileSizeLow=0x13a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="AJKU6c914.wav", cAlternateFileName="AJKU6C~1.WAV")) returned 1 [0127.983] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf627630, ftCreationTime.dwHighDateTime=0x1d5e652, ftLastAccessTime.dwLowDateTime=0xe88808a0, ftLastAccessTime.dwHighDateTime=0x1d5e84e, ftLastWriteTime.dwLowDateTime=0xe88808a0, ftLastWriteTime.dwHighDateTime=0x1d5e84e, nFileSizeHigh=0x0, nFileSizeLow=0xc05b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e3Bhd_Jr1 U0u.wav", cAlternateFileName="E3BHD_~1.WAV")) returned 1 [0127.983] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c3dc80, ftCreationTime.dwHighDateTime=0x1d5ed6f, ftLastAccessTime.dwLowDateTime=0x232ec5a0, ftLastAccessTime.dwHighDateTime=0x1d5e270, ftLastWriteTime.dwLowDateTime=0x232ec5a0, ftLastWriteTime.dwHighDateTime=0x1d5e270, nFileSizeHigh=0x0, nFileSizeLow=0x15de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LIT4 QUwh1.mp3", cAlternateFileName="LIT4QU~1.MP3")) returned 1 [0127.984] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7fad920, ftCreationTime.dwHighDateTime=0x1d5ee69, ftLastAccessTime.dwLowDateTime=0x9d737e10, ftLastAccessTime.dwHighDateTime=0x1d5ef58, ftLastWriteTime.dwLowDateTime=0x9d737e10, ftLastWriteTime.dwHighDateTime=0x1d5ef58, nFileSizeHigh=0x0, nFileSizeLow=0xeb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="QT2UGKUA3pJwM.mp3", cAlternateFileName="QT2UGK~1.MP3")) returned 1 [0127.984] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7af0140, ftCreationTime.dwHighDateTime=0x1d5ef19, ftLastAccessTime.dwLowDateTime=0xdb707210, ftLastAccessTime.dwHighDateTime=0x1d5e533, ftLastWriteTime.dwLowDateTime=0xdb707210, ftLastWriteTime.dwHighDateTime=0x1d5e533, nFileSizeHigh=0x0, nFileSizeLow=0x8723, dwReserved0=0x0, dwReserved1=0x0, cFileName="XmX2Z mORV.wav", cAlternateFileName="XMX2ZM~1.WAV")) returned 1 [0127.984] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.984] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0127.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.986] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\1z K9b", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\1z K9b", lpFilePart=0x0) returned 0x38 [0127.987] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\1z K9b\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b0894e0, ftCreationTime.dwHighDateTime=0x1d5edac, ftLastAccessTime.dwLowDateTime=0xc7186230, ftLastAccessTime.dwHighDateTime=0x1d5ec15, ftLastWriteTime.dwLowDateTime=0xc7186230, ftLastWriteTime.dwHighDateTime=0x1d5ec15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.987] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b0894e0, ftCreationTime.dwHighDateTime=0x1d5edac, ftLastAccessTime.dwLowDateTime=0xc7186230, ftLastAccessTime.dwHighDateTime=0x1d5ec15, ftLastWriteTime.dwLowDateTime=0xc7186230, ftLastWriteTime.dwHighDateTime=0x1d5ec15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.987] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15a94660, ftCreationTime.dwHighDateTime=0x1d5eaab, ftLastAccessTime.dwLowDateTime=0x12c017d0, ftLastAccessTime.dwHighDateTime=0x1d5edda, ftLastWriteTime.dwLowDateTime=0x12c017d0, ftLastWriteTime.dwHighDateTime=0x1d5edda, nFileSizeHigh=0x0, nFileSizeLow=0x14db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="tR06tYk5H-v.mp3", cAlternateFileName="TR06TY~1.MP3")) returned 1 [0127.987] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15a94660, ftCreationTime.dwHighDateTime=0x1d5eaab, ftLastAccessTime.dwLowDateTime=0x12c017d0, ftLastAccessTime.dwHighDateTime=0x1d5edda, ftLastWriteTime.dwLowDateTime=0x12c017d0, ftLastWriteTime.dwHighDateTime=0x1d5edda, nFileSizeHigh=0x0, nFileSizeLow=0x14db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="tR06tYk5H-v.mp3", cAlternateFileName="TR06TY~1.MP3")) returned 0 [0127.988] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\1z K9b", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\1z K9b", lpFilePart=0x0) returned 0x38 [0127.988] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\V5tiehiQK\\RxrYZWwYcDte0c1o6\\1z K9b\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b0894e0, ftCreationTime.dwHighDateTime=0x1d5edac, ftLastAccessTime.dwLowDateTime=0xc7186230, ftLastAccessTime.dwHighDateTime=0x1d5ec15, ftLastWriteTime.dwLowDateTime=0xc7186230, ftLastWriteTime.dwHighDateTime=0x1d5ec15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.988] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b0894e0, ftCreationTime.dwHighDateTime=0x1d5edac, ftLastAccessTime.dwLowDateTime=0xc7186230, ftLastAccessTime.dwHighDateTime=0x1d5ec15, ftLastWriteTime.dwLowDateTime=0xc7186230, ftLastWriteTime.dwHighDateTime=0x1d5ec15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.989] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15a94660, ftCreationTime.dwHighDateTime=0x1d5eaab, ftLastAccessTime.dwLowDateTime=0x12c017d0, ftLastAccessTime.dwHighDateTime=0x1d5edda, ftLastWriteTime.dwLowDateTime=0x12c017d0, ftLastWriteTime.dwHighDateTime=0x1d5edda, nFileSizeHigh=0x0, nFileSizeLow=0x14db2, dwReserved0=0x0, dwReserved1=0x0, cFileName="tR06tYk5H-v.mp3", cAlternateFileName="TR06TY~1.MP3")) returned 1 [0127.989] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.989] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\BBM8yWHjG4UwvnSmk8", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\BBM8yWHjG4UwvnSmk8", lpFilePart=0x0) returned 0x28 [0127.990] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\BBM8yWHjG4UwvnSmk8\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9e355f0, ftCreationTime.dwHighDateTime=0x1d5ebaf, ftLastAccessTime.dwLowDateTime=0x440f0b70, ftLastAccessTime.dwHighDateTime=0x1d5f00f, ftLastWriteTime.dwLowDateTime=0x440f0b70, ftLastWriteTime.dwHighDateTime=0x1d5f00f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807ea8 [0127.991] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9e355f0, ftCreationTime.dwHighDateTime=0x1d5ebaf, ftLastAccessTime.dwLowDateTime=0x440f0b70, ftLastAccessTime.dwHighDateTime=0x1d5f00f, ftLastWriteTime.dwLowDateTime=0x440f0b70, ftLastWriteTime.dwHighDateTime=0x1d5f00f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.991] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2836c60, ftCreationTime.dwHighDateTime=0x1d5f127, ftLastAccessTime.dwLowDateTime=0x403858f0, ftLastAccessTime.dwHighDateTime=0x1d5e914, ftLastWriteTime.dwLowDateTime=0x403858f0, ftLastWriteTime.dwHighDateTime=0x1d5e914, nFileSizeHigh=0x0, nFileSizeLow=0x11d1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="65AKg.mp3", cAlternateFileName="")) returned 1 [0127.991] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb11d1b40, ftCreationTime.dwHighDateTime=0x1d5e712, ftLastAccessTime.dwLowDateTime=0x6097fbb0, ftLastAccessTime.dwHighDateTime=0x1d5ecb0, ftLastWriteTime.dwLowDateTime=0x6097fbb0, ftLastWriteTime.dwHighDateTime=0x1d5ecb0, nFileSizeHigh=0x0, nFileSizeLow=0xb27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8AI8Ozl.m4a", cAlternateFileName="")) returned 1 [0127.991] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b220cf0, ftCreationTime.dwHighDateTime=0x1d5eb60, ftLastAccessTime.dwLowDateTime=0xe1292be0, ftLastAccessTime.dwHighDateTime=0x1d5e176, ftLastWriteTime.dwLowDateTime=0xe1292be0, ftLastWriteTime.dwHighDateTime=0x1d5e176, nFileSizeHigh=0x0, nFileSizeLow=0xc950, dwReserved0=0x0, dwReserved1=0x0, cFileName="aoq0mi1INEVnq.mp3", cAlternateFileName="AOQ0MI~1.MP3")) returned 1 [0127.991] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dfd8f30, ftCreationTime.dwHighDateTime=0x1d5ed55, ftLastAccessTime.dwLowDateTime=0xf6900a00, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0xf6900a00, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0xe4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hfZx6.m4a", cAlternateFileName="")) returned 1 [0127.991] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b372fb0, ftCreationTime.dwHighDateTime=0x1d5e8ae, ftLastAccessTime.dwLowDateTime=0x4c41c710, ftLastAccessTime.dwHighDateTime=0x1d5e36c, ftLastWriteTime.dwLowDateTime=0x4c41c710, ftLastWriteTime.dwHighDateTime=0x1d5e36c, nFileSizeHigh=0x0, nFileSizeLow=0x140d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SC0upnpoNcwduy.m4a", cAlternateFileName="SC0UPN~1.M4A")) returned 1 [0127.992] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1791f40, ftCreationTime.dwHighDateTime=0x1d5ed6c, ftLastAccessTime.dwLowDateTime=0x6af82540, ftLastAccessTime.dwHighDateTime=0x1d5f08d, ftLastWriteTime.dwLowDateTime=0x6af82540, ftLastWriteTime.dwHighDateTime=0x1d5f08d, nFileSizeHigh=0x0, nFileSizeLow=0xbf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="WceY 6vti.wav", cAlternateFileName="WCEY6V~1.WAV")) returned 1 [0127.992] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1791f40, ftCreationTime.dwHighDateTime=0x1d5ed6c, ftLastAccessTime.dwLowDateTime=0x6af82540, ftLastAccessTime.dwHighDateTime=0x1d5f08d, ftLastWriteTime.dwLowDateTime=0x6af82540, ftLastWriteTime.dwHighDateTime=0x1d5f08d, nFileSizeHigh=0x0, nFileSizeLow=0xbf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="WceY 6vti.wav", cAlternateFileName="WCEY6V~1.WAV")) returned 0 [0127.992] FindClose (in: hFindFile=0x5807ea8 | out: hFindFile=0x5807ea8) returned 1 [0127.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.992] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\BBM8yWHjG4UwvnSmk8", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\BBM8yWHjG4UwvnSmk8", lpFilePart=0x0) returned 0x28 [0127.992] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\BBM8yWHjG4UwvnSmk8\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9e355f0, ftCreationTime.dwHighDateTime=0x1d5ebaf, ftLastAccessTime.dwLowDateTime=0x440f0b70, ftLastAccessTime.dwHighDateTime=0x1d5f00f, ftLastWriteTime.dwLowDateTime=0x440f0b70, ftLastWriteTime.dwHighDateTime=0x1d5f00f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.993] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9e355f0, ftCreationTime.dwHighDateTime=0x1d5ebaf, ftLastAccessTime.dwLowDateTime=0x440f0b70, ftLastAccessTime.dwHighDateTime=0x1d5f00f, ftLastWriteTime.dwLowDateTime=0x440f0b70, ftLastWriteTime.dwHighDateTime=0x1d5f00f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.993] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2836c60, ftCreationTime.dwHighDateTime=0x1d5f127, ftLastAccessTime.dwLowDateTime=0x403858f0, ftLastAccessTime.dwHighDateTime=0x1d5e914, ftLastWriteTime.dwLowDateTime=0x403858f0, ftLastWriteTime.dwHighDateTime=0x1d5e914, nFileSizeHigh=0x0, nFileSizeLow=0x11d1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="65AKg.mp3", cAlternateFileName="")) returned 1 [0127.993] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb11d1b40, ftCreationTime.dwHighDateTime=0x1d5e712, ftLastAccessTime.dwLowDateTime=0x6097fbb0, ftLastAccessTime.dwHighDateTime=0x1d5ecb0, ftLastWriteTime.dwLowDateTime=0x6097fbb0, ftLastWriteTime.dwHighDateTime=0x1d5ecb0, nFileSizeHigh=0x0, nFileSizeLow=0xb27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8AI8Ozl.m4a", cAlternateFileName="")) returned 1 [0127.993] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b220cf0, ftCreationTime.dwHighDateTime=0x1d5eb60, ftLastAccessTime.dwLowDateTime=0xe1292be0, ftLastAccessTime.dwHighDateTime=0x1d5e176, ftLastWriteTime.dwLowDateTime=0xe1292be0, ftLastWriteTime.dwHighDateTime=0x1d5e176, nFileSizeHigh=0x0, nFileSizeLow=0xc950, dwReserved0=0x0, dwReserved1=0x0, cFileName="aoq0mi1INEVnq.mp3", cAlternateFileName="AOQ0MI~1.MP3")) returned 1 [0127.993] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dfd8f30, ftCreationTime.dwHighDateTime=0x1d5ed55, ftLastAccessTime.dwLowDateTime=0xf6900a00, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0xf6900a00, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0xe4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hfZx6.m4a", cAlternateFileName="")) returned 1 [0127.993] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b372fb0, ftCreationTime.dwHighDateTime=0x1d5e8ae, ftLastAccessTime.dwLowDateTime=0x4c41c710, ftLastAccessTime.dwHighDateTime=0x1d5e36c, ftLastWriteTime.dwLowDateTime=0x4c41c710, ftLastWriteTime.dwHighDateTime=0x1d5e36c, nFileSizeHigh=0x0, nFileSizeLow=0x140d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SC0upnpoNcwduy.m4a", cAlternateFileName="SC0UPN~1.M4A")) returned 1 [0127.993] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1791f40, ftCreationTime.dwHighDateTime=0x1d5ed6c, ftLastAccessTime.dwLowDateTime=0x6af82540, ftLastAccessTime.dwHighDateTime=0x1d5f08d, ftLastWriteTime.dwLowDateTime=0x6af82540, ftLastWriteTime.dwHighDateTime=0x1d5f08d, nFileSizeHigh=0x0, nFileSizeLow=0xbf31, dwReserved0=0x0, dwReserved1=0x0, cFileName="WceY 6vti.wav", cAlternateFileName="WCEY6V~1.WAV")) returned 1 [0127.994] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.994] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0127.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0127.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\3vC1NUCoGnv7y", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\3vC1NUCoGnv7y", lpFilePart=0x0) returned 0x23 [0127.997] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\3vC1NUCoGnv7y\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30eacce0, ftCreationTime.dwHighDateTime=0x1d5ee7b, ftLastAccessTime.dwLowDateTime=0x27900a70, ftLastAccessTime.dwHighDateTime=0x1d5f0f6, ftLastWriteTime.dwLowDateTime=0x27900a70, ftLastWriteTime.dwHighDateTime=0x1d5f0f6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5808228 [0127.997] FindNextFileW (in: hFindFile=0x5808228, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30eacce0, ftCreationTime.dwHighDateTime=0x1d5ee7b, ftLastAccessTime.dwLowDateTime=0x27900a70, ftLastAccessTime.dwHighDateTime=0x1d5f0f6, ftLastWriteTime.dwLowDateTime=0x27900a70, ftLastWriteTime.dwHighDateTime=0x1d5f0f6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.997] FindNextFileW (in: hFindFile=0x5808228, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd427aa90, ftCreationTime.dwHighDateTime=0x1d5f010, ftLastAccessTime.dwLowDateTime=0xe593cab0, ftLastAccessTime.dwHighDateTime=0x1d5e102, ftLastWriteTime.dwLowDateTime=0xe593cab0, ftLastWriteTime.dwHighDateTime=0x1d5e102, nFileSizeHigh=0x0, nFileSizeLow=0x1ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN2t__EN.m4a", cAlternateFileName="")) returned 1 [0127.997] FindNextFileW (in: hFindFile=0x5808228, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c924440, ftCreationTime.dwHighDateTime=0x1d5ec35, ftLastAccessTime.dwLowDateTime=0x5a3f1ec0, ftLastAccessTime.dwHighDateTime=0x1d5f0c4, ftLastWriteTime.dwLowDateTime=0x5a3f1ec0, ftLastWriteTime.dwHighDateTime=0x1d5f0c4, nFileSizeHigh=0x0, nFileSizeLow=0x12b0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wh99eGq.wav", cAlternateFileName="")) returned 1 [0127.998] FindNextFileW (in: hFindFile=0x5808228, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c924440, ftCreationTime.dwHighDateTime=0x1d5ec35, ftLastAccessTime.dwLowDateTime=0x5a3f1ec0, ftLastAccessTime.dwHighDateTime=0x1d5f0c4, ftLastWriteTime.dwLowDateTime=0x5a3f1ec0, ftLastWriteTime.dwHighDateTime=0x1d5f0c4, nFileSizeHigh=0x0, nFileSizeLow=0x12b0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wh99eGq.wav", cAlternateFileName="")) returned 0 [0127.998] FindClose (in: hFindFile=0x5808228 | out: hFindFile=0x5808228) returned 1 [0127.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0127.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0127.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0127.998] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\3vC1NUCoGnv7y", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\3vC1NUCoGnv7y", lpFilePart=0x0) returned 0x23 [0127.998] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\3vC1NUCoGnv7y\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30eacce0, ftCreationTime.dwHighDateTime=0x1d5ee7b, ftLastAccessTime.dwLowDateTime=0x27900a70, ftLastAccessTime.dwHighDateTime=0x1d5f0f6, ftLastWriteTime.dwLowDateTime=0x27900a70, ftLastWriteTime.dwHighDateTime=0x1d5f0f6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0127.998] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x30eacce0, ftCreationTime.dwHighDateTime=0x1d5ee7b, ftLastAccessTime.dwLowDateTime=0x27900a70, ftLastAccessTime.dwHighDateTime=0x1d5f0f6, ftLastWriteTime.dwLowDateTime=0x27900a70, ftLastWriteTime.dwHighDateTime=0x1d5f0f6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.999] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd427aa90, ftCreationTime.dwHighDateTime=0x1d5f010, ftLastAccessTime.dwLowDateTime=0xe593cab0, ftLastAccessTime.dwHighDateTime=0x1d5e102, ftLastWriteTime.dwLowDateTime=0xe593cab0, ftLastWriteTime.dwHighDateTime=0x1d5e102, nFileSizeHigh=0x0, nFileSizeLow=0x1ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EN2t__EN.m4a", cAlternateFileName="")) returned 1 [0127.999] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c924440, ftCreationTime.dwHighDateTime=0x1d5ec35, ftLastAccessTime.dwLowDateTime=0x5a3f1ec0, ftLastAccessTime.dwHighDateTime=0x1d5f0c4, ftLastWriteTime.dwLowDateTime=0x5a3f1ec0, ftLastWriteTime.dwHighDateTime=0x1d5f0c4, nFileSizeHigh=0x0, nFileSizeLow=0x12b0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wh99eGq.wav", cAlternateFileName="")) returned 1 [0127.999] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.999] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0127.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0127.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0128.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0128.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Local Settings", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Local Settings", lpFilePart=0x0) returned 0x1e [0128.001] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Local Settings\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0128.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0128.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0128.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links", lpFilePart=0x0) returned 0x15 [0128.003] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0128.004] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.004] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.004] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0128.004] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0128.004] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0128.005] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 0 [0128.005] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0128.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0128.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0128.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0128.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links", lpFilePart=0x0) returned 0x15 [0128.005] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0128.005] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.006] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.006] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0128.006] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0128.006] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0128.006] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.006] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0128.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0128.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0128.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0128.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites", lpFilePart=0x0) returned 0x19 [0128.009] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0128.009] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.009] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0128.009] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.010] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0128.010] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.010] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0128.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0128.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0128.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0128.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites", lpFilePart=0x0) returned 0x19 [0128.010] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0128.010] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.011] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0128.011] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.011] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0128.011] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 0 [0128.011] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0128.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0128.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0128.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0128.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links", lpFilePart=0x0) returned 0x1f [0128.013] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0128.014] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.014] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.014] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0128.014] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0128.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0128.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0128.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0128.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links", lpFilePart=0x0) returned 0x1f [0128.015] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807ea8 [0128.015] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.015] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.015] FindNextFileW (in: hFindFile=0x5807ea8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.016] FindClose (in: hFindFile=0x5807ea8 | out: hFindFile=0x5807ea8) returned 1 [0128.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0128.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0128.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0128.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0128.159] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0128.159] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.159] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.160] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0128.160] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0128.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0128.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0128.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0128.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0128.160] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0128.161] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.161] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.161] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.161] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0128.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0128.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0128.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0128.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0128.162] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6843f79, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6843f79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58081e8 [0128.163] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6843f79, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6843f79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.163] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4b8e90, ftCreationTime.dwHighDateTime=0x1d59f5a, ftLastAccessTime.dwLowDateTime=0xdc668200, ftLastAccessTime.dwHighDateTime=0x1d5e45b, ftLastWriteTime.dwLowDateTime=0xdc668200, ftLastWriteTime.dwHighDateTime=0x1d5e45b, nFileSizeHigh=0x0, nFileSizeLow=0x151dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="518W5r-93.pptx", cAlternateFileName="518W5R~1.PPT")) returned 1 [0128.163] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d098500, ftCreationTime.dwHighDateTime=0x1d5ce9f, ftLastAccessTime.dwLowDateTime=0x53c78480, ftLastAccessTime.dwHighDateTime=0x1d5cb7e, ftLastWriteTime.dwLowDateTime=0x53c78480, ftLastWriteTime.dwHighDateTime=0x1d5cb7e, nFileSizeHigh=0x0, nFileSizeLow=0x43d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8U8eAAlY_V9XGp.pptx", cAlternateFileName="8U8EAA~1.PPT")) returned 1 [0128.163] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6eba30, ftCreationTime.dwHighDateTime=0x1d5e6bc, ftLastAccessTime.dwLowDateTime=0xbab35e20, ftLastAccessTime.dwHighDateTime=0x1d57aee, ftLastWriteTime.dwLowDateTime=0xbab35e20, ftLastWriteTime.dwHighDateTime=0x1d57aee, nFileSizeHigh=0x0, nFileSizeLow=0x10c7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9-uOiF4JDgSBFNfK.xlsx", cAlternateFileName="9-UOIF~1.XLS")) returned 1 [0128.164] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc06faa0, ftCreationTime.dwHighDateTime=0x1d5b3ee, ftLastAccessTime.dwLowDateTime=0x558f3670, ftLastAccessTime.dwHighDateTime=0x1d5a4c1, ftLastWriteTime.dwLowDateTime=0x558f3670, ftLastWriteTime.dwHighDateTime=0x1d5a4c1, nFileSizeHigh=0x0, nFileSizeLow=0x4875, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADUOQhgblZC.docx", cAlternateFileName="ADUOQH~1.DOC")) returned 1 [0128.164] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe56410, ftCreationTime.dwHighDateTime=0x1d5cc22, ftLastAccessTime.dwLowDateTime=0xe7324530, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0xe7324530, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x956d, dwReserved0=0x0, dwReserved1=0x0, cFileName="An2XyJELftzrrda2Qi9Z.pptx", cAlternateFileName="AN2XYJ~1.PPT")) returned 1 [0128.164] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe922a4a0, ftCreationTime.dwHighDateTime=0x1d5c986, ftLastAccessTime.dwLowDateTime=0x6ea4c040, ftLastAccessTime.dwHighDateTime=0x1d5c711, ftLastWriteTime.dwLowDateTime=0x6ea4c040, ftLastWriteTime.dwHighDateTime=0x1d5c711, nFileSizeHigh=0x0, nFileSizeLow=0x16c19, dwReserved0=0x0, dwReserved1=0x0, cFileName="awjYBWWUUDv.pptx", cAlternateFileName="AWJYBW~1.PPT")) returned 1 [0128.164] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9edf4f0, ftCreationTime.dwHighDateTime=0x1d5e7c4, ftLastAccessTime.dwLowDateTime=0xbc9f0000, ftLastAccessTime.dwHighDateTime=0x1d5ea14, ftLastWriteTime.dwLowDateTime=0xbc9f0000, ftLastWriteTime.dwHighDateTime=0x1d5ea14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C88ZZWLu 8ct2QXY", cAlternateFileName="C88ZZW~1")) returned 1 [0128.165] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0128.165] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.165] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebd9720, ftCreationTime.dwHighDateTime=0x1d5ed6b, ftLastAccessTime.dwLowDateTime=0x96ec1c40, ftLastAccessTime.dwHighDateTime=0x1d5e996, ftLastWriteTime.dwLowDateTime=0x96ec1c40, ftLastWriteTime.dwHighDateTime=0x1d5e996, nFileSizeHigh=0x0, nFileSizeLow=0x11916, dwReserved0=0x0, dwReserved1=0x0, cFileName="DPDy.pptx", cAlternateFileName="DPDY~1.PPT")) returned 1 [0128.165] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b657ae0, ftCreationTime.dwHighDateTime=0x1d580e0, ftLastAccessTime.dwLowDateTime=0x8431b530, ftLastAccessTime.dwHighDateTime=0x1d587dd, ftLastWriteTime.dwLowDateTime=0x8431b530, ftLastWriteTime.dwHighDateTime=0x1d587dd, nFileSizeHigh=0x0, nFileSizeLow=0x680d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwLN28PIWgDe.pptx", cAlternateFileName="EWLN28~1.PPT")) returned 1 [0128.165] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c2bbe0, ftCreationTime.dwHighDateTime=0x1d5e121, ftLastAccessTime.dwLowDateTime=0xdea5ca10, ftLastAccessTime.dwHighDateTime=0x1d5e610, ftLastWriteTime.dwLowDateTime=0xdea5ca10, ftLastWriteTime.dwHighDateTime=0x1d5e610, nFileSizeHigh=0x0, nFileSizeLow=0x5118, dwReserved0=0x0, dwReserved1=0x0, cFileName="fko8QIWFn.doc", cAlternateFileName="FKO8QI~1.DOC")) returned 1 [0128.166] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x176db780, ftCreationTime.dwHighDateTime=0x1d5e2fc, ftLastAccessTime.dwLowDateTime=0xff99a540, ftLastAccessTime.dwHighDateTime=0x1d5f0f9, ftLastWriteTime.dwLowDateTime=0xff99a540, ftLastWriteTime.dwHighDateTime=0x1d5f0f9, nFileSizeHigh=0x0, nFileSizeLow=0x4b37, dwReserved0=0x0, dwReserved1=0x0, cFileName="fZDHLjaFprJui3.ots", cAlternateFileName="FZDHLJ~1.OTS")) returned 1 [0128.166] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70615340, ftCreationTime.dwHighDateTime=0x1d5e6a0, ftLastAccessTime.dwLowDateTime=0x7255050, ftLastAccessTime.dwHighDateTime=0x1d5d973, ftLastWriteTime.dwLowDateTime=0x7255050, ftLastWriteTime.dwHighDateTime=0x1d5d973, nFileSizeHigh=0x0, nFileSizeLow=0x12a59, dwReserved0=0x0, dwReserved1=0x0, cFileName="h-wPw6jwq.xlsx", cAlternateFileName="H-WPW6~1.XLS")) returned 1 [0128.166] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d58f720, ftCreationTime.dwHighDateTime=0x1d5e5ef, ftLastAccessTime.dwLowDateTime=0x90dfda70, ftLastAccessTime.dwHighDateTime=0x1d5e6e0, ftLastWriteTime.dwLowDateTime=0x90dfda70, ftLastWriteTime.dwHighDateTime=0x1d5e6e0, nFileSizeHigh=0x0, nFileSizeLow=0x104a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAxyw3x-tJrrF.docx", cAlternateFileName="JAXYW3~1.DOC")) returned 1 [0128.166] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a38e0, ftCreationTime.dwHighDateTime=0x1d5e948, ftLastAccessTime.dwLowDateTime=0x8f475610, ftLastAccessTime.dwHighDateTime=0x1d5ecf4, ftLastWriteTime.dwLowDateTime=0x8f475610, ftLastWriteTime.dwHighDateTime=0x1d5ecf4, nFileSizeHigh=0x0, nFileSizeLow=0xc882, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsQ9cTSe.csv", cAlternateFileName="")) returned 1 [0128.166] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd44bba0, ftCreationTime.dwHighDateTime=0x1d5ad68, ftLastAccessTime.dwLowDateTime=0xb3b32a70, ftLastAccessTime.dwHighDateTime=0x1d5d150, ftLastWriteTime.dwLowDateTime=0xb3b32a70, ftLastWriteTime.dwHighDateTime=0x1d5d150, nFileSizeHigh=0x0, nFileSizeLow=0x12e8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="l-ppSCaozAbuTW1.xlsx", cAlternateFileName="L-PPSC~1.XLS")) returned 1 [0128.167] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc1a980, ftCreationTime.dwHighDateTime=0x1d5e899, ftLastAccessTime.dwLowDateTime=0x10623fb0, ftLastAccessTime.dwHighDateTime=0x1d5b408, ftLastWriteTime.dwLowDateTime=0x10623fb0, ftLastWriteTime.dwHighDateTime=0x1d5b408, nFileSizeHigh=0x0, nFileSizeLow=0x167f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MHd9s9bruV.xlsx", cAlternateFileName="MHD9S9~1.XLS")) returned 1 [0128.167] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0128.167] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0128.167] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0128.167] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0128.168] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0147bf0, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xceef23b0, ftLastAccessTime.dwHighDateTime=0x1d5ce72, ftLastWriteTime.dwLowDateTime=0xceef23b0, ftLastWriteTime.dwHighDateTime=0x1d5ce72, nFileSizeHigh=0x0, nFileSizeLow=0x1f8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OruO9Aw.docx", cAlternateFileName="ORUO9A~1.DOC")) returned 1 [0128.168] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0128.168] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02bb500, ftCreationTime.dwHighDateTime=0x1d5cc1f, ftLastAccessTime.dwLowDateTime=0x624d6c30, ftLastAccessTime.dwHighDateTime=0x1d5c706, ftLastWriteTime.dwLowDateTime=0x624d6c30, ftLastWriteTime.dwHighDateTime=0x1d5c706, nFileSizeHigh=0x0, nFileSizeLow=0x904b, dwReserved0=0x0, dwReserved1=0x0, cFileName="qh7qU7_Fer.docx", cAlternateFileName="QH7QU7~1.DOC")) returned 1 [0128.168] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b37f50, ftCreationTime.dwHighDateTime=0x1d5dd69, ftLastAccessTime.dwLowDateTime=0xe223be0, ftLastAccessTime.dwHighDateTime=0x1d59529, ftLastWriteTime.dwLowDateTime=0xe223be0, ftLastWriteTime.dwHighDateTime=0x1d59529, nFileSizeHigh=0x0, nFileSizeLow=0x1261c, dwReserved0=0x0, dwReserved1=0x0, cFileName="s6iYNhoLf3OQ4n4C3H2.xlsx", cAlternateFileName="S6IYNH~1.XLS")) returned 1 [0128.168] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccf471c0, ftCreationTime.dwHighDateTime=0x1d58bae, ftLastAccessTime.dwLowDateTime=0x85e7d940, ftLastAccessTime.dwHighDateTime=0x1d56e79, ftLastWriteTime.dwLowDateTime=0x85e7d940, ftLastWriteTime.dwHighDateTime=0x1d56e79, nFileSizeHigh=0x0, nFileSizeLow=0x6e38, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6TgyvPCgPe2UW.docx", cAlternateFileName="T6TGYV~1.DOC")) returned 1 [0128.169] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4cc800, ftCreationTime.dwHighDateTime=0x1d57c65, ftLastAccessTime.dwLowDateTime=0xeb769b30, ftLastAccessTime.dwHighDateTime=0x1d5df89, ftLastWriteTime.dwLowDateTime=0xeb769b30, ftLastWriteTime.dwHighDateTime=0x1d5df89, nFileSizeHigh=0x0, nFileSizeLow=0x4fbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VqeC4xk8qQsfNx3.docx", cAlternateFileName="VQEC4X~1.DOC")) returned 1 [0128.169] FindNextFileW (in: hFindFile=0x58081e8, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4cc800, ftCreationTime.dwHighDateTime=0x1d57c65, ftLastAccessTime.dwLowDateTime=0xeb769b30, ftLastAccessTime.dwHighDateTime=0x1d5df89, ftLastWriteTime.dwLowDateTime=0xeb769b30, ftLastWriteTime.dwHighDateTime=0x1d5df89, nFileSizeHigh=0x0, nFileSizeLow=0x4fbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VqeC4xk8qQsfNx3.docx", cAlternateFileName="VQEC4X~1.DOC")) returned 0 [0128.169] FindClose (in: hFindFile=0x58081e8 | out: hFindFile=0x58081e8) returned 1 [0128.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0128.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0128.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0128.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0128.170] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6843f79, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6843f79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5807d68 [0128.170] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe6843f79, ftLastAccessTime.dwHighDateTime=0x1d5f12a, ftLastWriteTime.dwLowDateTime=0xe6843f79, ftLastWriteTime.dwHighDateTime=0x1d5f12a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.170] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4b8e90, ftCreationTime.dwHighDateTime=0x1d59f5a, ftLastAccessTime.dwLowDateTime=0xdc668200, ftLastAccessTime.dwHighDateTime=0x1d5e45b, ftLastWriteTime.dwLowDateTime=0xdc668200, ftLastWriteTime.dwHighDateTime=0x1d5e45b, nFileSizeHigh=0x0, nFileSizeLow=0x151dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="518W5r-93.pptx", cAlternateFileName="518W5R~1.PPT")) returned 1 [0128.170] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d098500, ftCreationTime.dwHighDateTime=0x1d5ce9f, ftLastAccessTime.dwLowDateTime=0x53c78480, ftLastAccessTime.dwHighDateTime=0x1d5cb7e, ftLastWriteTime.dwLowDateTime=0x53c78480, ftLastWriteTime.dwHighDateTime=0x1d5cb7e, nFileSizeHigh=0x0, nFileSizeLow=0x43d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8U8eAAlY_V9XGp.pptx", cAlternateFileName="8U8EAA~1.PPT")) returned 1 [0128.170] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae6eba30, ftCreationTime.dwHighDateTime=0x1d5e6bc, ftLastAccessTime.dwLowDateTime=0xbab35e20, ftLastAccessTime.dwHighDateTime=0x1d57aee, ftLastWriteTime.dwLowDateTime=0xbab35e20, ftLastWriteTime.dwHighDateTime=0x1d57aee, nFileSizeHigh=0x0, nFileSizeLow=0x10c7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9-uOiF4JDgSBFNfK.xlsx", cAlternateFileName="9-UOIF~1.XLS")) returned 1 [0128.170] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc06faa0, ftCreationTime.dwHighDateTime=0x1d5b3ee, ftLastAccessTime.dwLowDateTime=0x558f3670, ftLastAccessTime.dwHighDateTime=0x1d5a4c1, ftLastWriteTime.dwLowDateTime=0x558f3670, ftLastWriteTime.dwHighDateTime=0x1d5a4c1, nFileSizeHigh=0x0, nFileSizeLow=0x4875, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADUOQhgblZC.docx", cAlternateFileName="ADUOQH~1.DOC")) returned 1 [0128.171] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fe56410, ftCreationTime.dwHighDateTime=0x1d5cc22, ftLastAccessTime.dwLowDateTime=0xe7324530, ftLastAccessTime.dwHighDateTime=0x1d5e112, ftLastWriteTime.dwLowDateTime=0xe7324530, ftLastWriteTime.dwHighDateTime=0x1d5e112, nFileSizeHigh=0x0, nFileSizeLow=0x956d, dwReserved0=0x0, dwReserved1=0x0, cFileName="An2XyJELftzrrda2Qi9Z.pptx", cAlternateFileName="AN2XYJ~1.PPT")) returned 1 [0128.171] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe922a4a0, ftCreationTime.dwHighDateTime=0x1d5c986, ftLastAccessTime.dwLowDateTime=0x6ea4c040, ftLastAccessTime.dwHighDateTime=0x1d5c711, ftLastWriteTime.dwLowDateTime=0x6ea4c040, ftLastWriteTime.dwHighDateTime=0x1d5c711, nFileSizeHigh=0x0, nFileSizeLow=0x16c19, dwReserved0=0x0, dwReserved1=0x0, cFileName="awjYBWWUUDv.pptx", cAlternateFileName="AWJYBW~1.PPT")) returned 1 [0128.171] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9edf4f0, ftCreationTime.dwHighDateTime=0x1d5e7c4, ftLastAccessTime.dwLowDateTime=0xbc9f0000, ftLastAccessTime.dwHighDateTime=0x1d5ea14, ftLastWriteTime.dwLowDateTime=0xbc9f0000, ftLastWriteTime.dwHighDateTime=0x1d5ea14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C88ZZWLu 8ct2QXY", cAlternateFileName="C88ZZW~1")) returned 1 [0128.171] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0128.171] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0128.171] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ebd9720, ftCreationTime.dwHighDateTime=0x1d5ed6b, ftLastAccessTime.dwLowDateTime=0x96ec1c40, ftLastAccessTime.dwHighDateTime=0x1d5e996, ftLastWriteTime.dwLowDateTime=0x96ec1c40, ftLastWriteTime.dwHighDateTime=0x1d5e996, nFileSizeHigh=0x0, nFileSizeLow=0x11916, dwReserved0=0x0, dwReserved1=0x0, cFileName="DPDy.pptx", cAlternateFileName="DPDY~1.PPT")) returned 1 [0128.172] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b657ae0, ftCreationTime.dwHighDateTime=0x1d580e0, ftLastAccessTime.dwLowDateTime=0x8431b530, ftLastAccessTime.dwHighDateTime=0x1d587dd, ftLastWriteTime.dwLowDateTime=0x8431b530, ftLastWriteTime.dwHighDateTime=0x1d587dd, nFileSizeHigh=0x0, nFileSizeLow=0x680d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwLN28PIWgDe.pptx", cAlternateFileName="EWLN28~1.PPT")) returned 1 [0128.172] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12c2bbe0, ftCreationTime.dwHighDateTime=0x1d5e121, ftLastAccessTime.dwLowDateTime=0xdea5ca10, ftLastAccessTime.dwHighDateTime=0x1d5e610, ftLastWriteTime.dwLowDateTime=0xdea5ca10, ftLastWriteTime.dwHighDateTime=0x1d5e610, nFileSizeHigh=0x0, nFileSizeLow=0x5118, dwReserved0=0x0, dwReserved1=0x0, cFileName="fko8QIWFn.doc", cAlternateFileName="FKO8QI~1.DOC")) returned 1 [0128.172] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x176db780, ftCreationTime.dwHighDateTime=0x1d5e2fc, ftLastAccessTime.dwLowDateTime=0xff99a540, ftLastAccessTime.dwHighDateTime=0x1d5f0f9, ftLastWriteTime.dwLowDateTime=0xff99a540, ftLastWriteTime.dwHighDateTime=0x1d5f0f9, nFileSizeHigh=0x0, nFileSizeLow=0x4b37, dwReserved0=0x0, dwReserved1=0x0, cFileName="fZDHLjaFprJui3.ots", cAlternateFileName="FZDHLJ~1.OTS")) returned 1 [0128.172] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70615340, ftCreationTime.dwHighDateTime=0x1d5e6a0, ftLastAccessTime.dwLowDateTime=0x7255050, ftLastAccessTime.dwHighDateTime=0x1d5d973, ftLastWriteTime.dwLowDateTime=0x7255050, ftLastWriteTime.dwHighDateTime=0x1d5d973, nFileSizeHigh=0x0, nFileSizeLow=0x12a59, dwReserved0=0x0, dwReserved1=0x0, cFileName="h-wPw6jwq.xlsx", cAlternateFileName="H-WPW6~1.XLS")) returned 1 [0128.173] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d58f720, ftCreationTime.dwHighDateTime=0x1d5e5ef, ftLastAccessTime.dwLowDateTime=0x90dfda70, ftLastAccessTime.dwHighDateTime=0x1d5e6e0, ftLastWriteTime.dwLowDateTime=0x90dfda70, ftLastWriteTime.dwHighDateTime=0x1d5e6e0, nFileSizeHigh=0x0, nFileSizeLow=0x104a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAxyw3x-tJrrF.docx", cAlternateFileName="JAXYW3~1.DOC")) returned 1 [0128.173] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x830a38e0, ftCreationTime.dwHighDateTime=0x1d5e948, ftLastAccessTime.dwLowDateTime=0x8f475610, ftLastAccessTime.dwHighDateTime=0x1d5ecf4, ftLastWriteTime.dwLowDateTime=0x8f475610, ftLastWriteTime.dwHighDateTime=0x1d5ecf4, nFileSizeHigh=0x0, nFileSizeLow=0xc882, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsQ9cTSe.csv", cAlternateFileName="")) returned 1 [0128.173] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd44bba0, ftCreationTime.dwHighDateTime=0x1d5ad68, ftLastAccessTime.dwLowDateTime=0xb3b32a70, ftLastAccessTime.dwHighDateTime=0x1d5d150, ftLastWriteTime.dwLowDateTime=0xb3b32a70, ftLastWriteTime.dwHighDateTime=0x1d5d150, nFileSizeHigh=0x0, nFileSizeLow=0x12e8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="l-ppSCaozAbuTW1.xlsx", cAlternateFileName="L-PPSC~1.XLS")) returned 1 [0128.174] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dc1a980, ftCreationTime.dwHighDateTime=0x1d5e899, ftLastAccessTime.dwLowDateTime=0x10623fb0, ftLastAccessTime.dwHighDateTime=0x1d5b408, ftLastWriteTime.dwLowDateTime=0x10623fb0, ftLastWriteTime.dwHighDateTime=0x1d5b408, nFileSizeHigh=0x0, nFileSizeLow=0x167f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MHd9s9bruV.xlsx", cAlternateFileName="MHD9S9~1.XLS")) returned 1 [0128.174] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0128.174] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0128.174] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0128.174] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0128.175] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0147bf0, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0xceef23b0, ftLastAccessTime.dwHighDateTime=0x1d5ce72, ftLastWriteTime.dwLowDateTime=0xceef23b0, ftLastWriteTime.dwHighDateTime=0x1d5ce72, nFileSizeHigh=0x0, nFileSizeLow=0x1f8d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OruO9Aw.docx", cAlternateFileName="ORUO9A~1.DOC")) returned 1 [0128.175] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x5ee892ad, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0128.175] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02bb500, ftCreationTime.dwHighDateTime=0x1d5cc1f, ftLastAccessTime.dwLowDateTime=0x624d6c30, ftLastAccessTime.dwHighDateTime=0x1d5c706, ftLastWriteTime.dwLowDateTime=0x624d6c30, ftLastWriteTime.dwHighDateTime=0x1d5c706, nFileSizeHigh=0x0, nFileSizeLow=0x904b, dwReserved0=0x0, dwReserved1=0x0, cFileName="qh7qU7_Fer.docx", cAlternateFileName="QH7QU7~1.DOC")) returned 1 [0128.175] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6b37f50, ftCreationTime.dwHighDateTime=0x1d5dd69, ftLastAccessTime.dwLowDateTime=0xe223be0, ftLastAccessTime.dwHighDateTime=0x1d59529, ftLastWriteTime.dwLowDateTime=0xe223be0, ftLastWriteTime.dwHighDateTime=0x1d59529, nFileSizeHigh=0x0, nFileSizeLow=0x1261c, dwReserved0=0x0, dwReserved1=0x0, cFileName="s6iYNhoLf3OQ4n4C3H2.xlsx", cAlternateFileName="S6IYNH~1.XLS")) returned 1 [0128.175] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccf471c0, ftCreationTime.dwHighDateTime=0x1d58bae, ftLastAccessTime.dwLowDateTime=0x85e7d940, ftLastAccessTime.dwHighDateTime=0x1d56e79, ftLastWriteTime.dwLowDateTime=0x85e7d940, ftLastWriteTime.dwHighDateTime=0x1d56e79, nFileSizeHigh=0x0, nFileSizeLow=0x6e38, dwReserved0=0x0, dwReserved1=0x0, cFileName="T6TgyvPCgPe2UW.docx", cAlternateFileName="T6TGYV~1.DOC")) returned 1 [0128.175] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4cc800, ftCreationTime.dwHighDateTime=0x1d57c65, ftLastAccessTime.dwLowDateTime=0xeb769b30, ftLastAccessTime.dwHighDateTime=0x1d5df89, ftLastWriteTime.dwLowDateTime=0xeb769b30, ftLastWriteTime.dwHighDateTime=0x1d5df89, nFileSizeHigh=0x0, nFileSizeLow=0x4fbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="VqeC4xk8qQsfNx3.docx", cAlternateFileName="VQEC4X~1.DOC")) returned 1 [0128.176] FindNextFileW (in: hFindFile=0x5807d68, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.176] FindClose (in: hFindFile=0x5807d68 | out: hFindFile=0x5807d68) returned 1 [0128.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0128.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0128.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx", lpFilePart=0x0) returned 0x28 [0128.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0128.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\518w5r-93.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0128.181] GetFileType (hFile=0x78c) returned 0x1 [0128.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0128.181] GetFileType (hFile=0x78c) returned 0x1 [0128.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx.P4WN3D", lpFilePart=0x0) returned 0x2f [0128.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0128.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\518w5r-93.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0128.443] GetFileType (hFile=0x788) returned 0x1 [0128.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0128.443] GetFileType (hFile=0x788) returned 0x1 [0128.443] SetEndOfFile (hFile=0x788) returned 1 [0128.443] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x151dc [0128.444] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.445] WriteFile (in: hFile=0x788, lpBuffer=0x2a7b098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7b098*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.447] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.447] WriteFile (in: hFile=0x788, lpBuffer=0x2a7c0a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7c0a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.447] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.448] WriteFile (in: hFile=0x788, lpBuffer=0x2a7d0b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7d0b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.448] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.449] WriteFile (in: hFile=0x788, lpBuffer=0x2a7e0bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7e0bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.449] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.449] WriteFile (in: hFile=0x788, lpBuffer=0x2a7f0c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7f0c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.449] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.450] WriteFile (in: hFile=0x788, lpBuffer=0x2a800d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a800d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.450] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.450] WriteFile (in: hFile=0x788, lpBuffer=0x2a810e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a810e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.450] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.453] WriteFile (in: hFile=0x788, lpBuffer=0x2a820ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a820ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.453] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.633] WriteFile (in: hFile=0x788, lpBuffer=0x2a830f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a830f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.634] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.634] WriteFile (in: hFile=0x788, lpBuffer=0x2a84104*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a84104*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.634] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.635] WriteFile (in: hFile=0x788, lpBuffer=0x2a85110*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a85110*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.635] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.635] WriteFile (in: hFile=0x788, lpBuffer=0x2a8611c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8611c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.635] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.636] WriteFile (in: hFile=0x788, lpBuffer=0x2a87128*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a87128*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.636] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.636] WriteFile (in: hFile=0x788, lpBuffer=0x2a88134*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a88134*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.637] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.637] WriteFile (in: hFile=0x788, lpBuffer=0x2a89140*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a89140*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.637] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.637] WriteFile (in: hFile=0x788, lpBuffer=0x2a8a14c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8a14c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.638] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.638] WriteFile (in: hFile=0x788, lpBuffer=0x2a8b158*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8b158*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.638] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.639] WriteFile (in: hFile=0x788, lpBuffer=0x2a8c164*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8c164*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.639] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.639] WriteFile (in: hFile=0x788, lpBuffer=0x2a8d170*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8d170*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.639] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.640] WriteFile (in: hFile=0x788, lpBuffer=0x2a8e17c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8e17c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.640] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.640] WriteFile (in: hFile=0x788, lpBuffer=0x2a8f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8f188*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.641] ReadFile (in: hFile=0x78c, lpBuffer=0x2a79c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a79c48*, lpNumberOfBytesRead=0xb3f1fc*=0x1dc, lpOverlapped=0x0) returned 1 [0128.641] WriteFile (in: hFile=0x788, lpBuffer=0x2a90370*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a90370*, lpNumberOfBytesWritten=0xb3f1b4*=0x1e0, lpOverlapped=0x0) returned 1 [0128.642] CloseHandle (hObject=0x788) returned 1 [0128.649] CloseHandle (hObject=0x78c) returned 1 [0128.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx", lpFilePart=0x0) returned 0x28 [0128.652] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\518W5r-93.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\518w5r-93.pptx")) returned 1 [0128.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx", lpFilePart=0x0) returned 0x2d [0128.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0128.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\8u8eaaly_v9xgp.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0128.819] GetFileType (hFile=0x78c) returned 0x1 [0128.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0128.819] GetFileType (hFile=0x78c) returned 0x1 [0128.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx.P4WN3D", lpFilePart=0x0) returned 0x34 [0128.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0128.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\8u8eaaly_v9xgp.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0128.820] GetFileType (hFile=0x788) returned 0x1 [0128.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0128.820] GetFileType (hFile=0x788) returned 0x1 [0128.820] SetEndOfFile (hFile=0x788) returned 1 [0128.820] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x43d3 [0128.821] ReadFile (in: hFile=0x78c, lpBuffer=0x2a920fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a920fc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.822] WriteFile (in: hFile=0x788, lpBuffer=0x2a9354c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9354c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.823] ReadFile (in: hFile=0x78c, lpBuffer=0x2a920fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a920fc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.823] WriteFile (in: hFile=0x788, lpBuffer=0x2a94558*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a94558*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.823] ReadFile (in: hFile=0x78c, lpBuffer=0x2a920fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a920fc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.823] WriteFile (in: hFile=0x788, lpBuffer=0x2a95564*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a95564*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.824] ReadFile (in: hFile=0x78c, lpBuffer=0x2a920fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a920fc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.824] WriteFile (in: hFile=0x788, lpBuffer=0x2a96570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a96570*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.824] ReadFile (in: hFile=0x78c, lpBuffer=0x2a920fc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a920fc*, lpNumberOfBytesRead=0xb3f1fc*=0x3d3, lpOverlapped=0x0) returned 1 [0128.824] WriteFile (in: hFile=0x788, lpBuffer=0x2a97958*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a97958*, lpNumberOfBytesWritten=0xb3f1b4*=0x3e0, lpOverlapped=0x0) returned 1 [0128.825] CloseHandle (hObject=0x788) returned 1 [0128.882] CloseHandle (hObject=0x78c) returned 1 [0128.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx", lpFilePart=0x0) returned 0x2d [0128.884] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\8U8eAAlY_V9XGp.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\8u8eaaly_v9xgp.pptx")) returned 1 [0128.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx", lpFilePart=0x0) returned 0x2a [0128.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0128.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx" (normalized: "c:\\users\\fd1hvy\\documents\\aduoqhgblzc.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0128.950] GetFileType (hFile=0x78c) returned 0x1 [0128.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0128.950] GetFileType (hFile=0x78c) returned 0x1 [0128.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx.P4WN3D", lpFilePart=0x0) returned 0x31 [0128.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0128.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\aduoqhgblzc.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0128.951] GetFileType (hFile=0x788) returned 0x1 [0128.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0128.951] GetFileType (hFile=0x788) returned 0x1 [0128.951] SetEndOfFile (hFile=0x788) returned 1 [0128.951] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x4875 [0128.952] ReadFile (in: hFile=0x78c, lpBuffer=0x2a996e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a996e0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.952] WriteFile (in: hFile=0x788, lpBuffer=0x2a9ab30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9ab30*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.953] ReadFile (in: hFile=0x78c, lpBuffer=0x2a996e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a996e0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.954] WriteFile (in: hFile=0x788, lpBuffer=0x2a9bb3c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9bb3c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.954] ReadFile (in: hFile=0x78c, lpBuffer=0x2a996e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a996e0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.954] WriteFile (in: hFile=0x788, lpBuffer=0x2a9cb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9cb48*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.954] ReadFile (in: hFile=0x78c, lpBuffer=0x2a996e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a996e0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0128.955] WriteFile (in: hFile=0x788, lpBuffer=0x2a9db54*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9db54*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0128.955] ReadFile (in: hFile=0x78c, lpBuffer=0x2a996e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a996e0*, lpNumberOfBytesRead=0xb3f1fc*=0x875, lpOverlapped=0x0) returned 1 [0128.955] WriteFile (in: hFile=0x788, lpBuffer=0x2a9f3dc*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a9f3dc*, lpNumberOfBytesWritten=0xb3f1b4*=0x880, lpOverlapped=0x0) returned 1 [0128.956] CloseHandle (hObject=0x788) returned 1 [0128.957] CloseHandle (hObject=0x78c) returned 1 [0128.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx", lpFilePart=0x0) returned 0x2a [0128.960] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ADUOQhgblZC.docx" (normalized: "c:\\users\\fd1hvy\\documents\\aduoqhgblzc.docx")) returned 1 [0129.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx", lpFilePart=0x0) returned 0x33 [0129.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.010] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\an2xyjelftzrrda2qi9z.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0129.010] GetFileType (hFile=0x78c) returned 0x1 [0129.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.010] GetFileType (hFile=0x78c) returned 0x1 [0129.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx.P4WN3D", lpFilePart=0x0) returned 0x3a [0129.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.011] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\an2xyjelftzrrda2qi9z.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0129.011] GetFileType (hFile=0x788) returned 0x1 [0129.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.011] GetFileType (hFile=0x788) returned 0x1 [0129.011] SetEndOfFile (hFile=0x788) returned 1 [0129.011] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x956d [0129.012] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.013] WriteFile (in: hFile=0x788, lpBuffer=0x2aa2604*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa2604*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.014] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.014] WriteFile (in: hFile=0x788, lpBuffer=0x2aa3610*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa3610*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.014] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.015] WriteFile (in: hFile=0x788, lpBuffer=0x2aa461c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa461c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.015] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.015] WriteFile (in: hFile=0x788, lpBuffer=0x2aa5628*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa5628*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.015] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.015] WriteFile (in: hFile=0x788, lpBuffer=0x2aa6634*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6634*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.016] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.016] WriteFile (in: hFile=0x788, lpBuffer=0x2aa7640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa7640*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.016] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.016] WriteFile (in: hFile=0x788, lpBuffer=0x2aa864c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa864c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.017] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.017] WriteFile (in: hFile=0x788, lpBuffer=0x2aa9658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa9658*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.017] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.017] WriteFile (in: hFile=0x788, lpBuffer=0x2aaa664*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aaa664*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.017] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa11b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa11b4*, lpNumberOfBytesRead=0xb3f1fc*=0x56d, lpOverlapped=0x0) returned 1 [0129.018] WriteFile (in: hFile=0x788, lpBuffer=0x2aabbdc*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2aabbdc*, lpNumberOfBytesWritten=0xb3f1b4*=0x570, lpOverlapped=0x0) returned 1 [0129.018] CloseHandle (hObject=0x788) returned 1 [0129.020] CloseHandle (hObject=0x78c) returned 1 [0129.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx", lpFilePart=0x0) returned 0x33 [0129.117] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\An2XyJELftzrrda2Qi9Z.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\an2xyjelftzrrda2qi9z.pptx")) returned 1 [0129.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx", lpFilePart=0x0) returned 0x2a [0129.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\awjybwwuudv.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0129.169] GetFileType (hFile=0x78c) returned 0x1 [0129.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.169] GetFileType (hFile=0x78c) returned 0x1 [0129.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx.P4WN3D", lpFilePart=0x0) returned 0x31 [0129.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.170] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\awjybwwuudv.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0129.170] GetFileType (hFile=0x788) returned 0x1 [0129.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.170] GetFileType (hFile=0x788) returned 0x1 [0129.170] SetEndOfFile (hFile=0x788) returned 1 [0129.171] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x16c19 [0129.171] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.172] WriteFile (in: hFile=0x788, lpBuffer=0x2aaedc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aaedc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.174] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.174] WriteFile (in: hFile=0x788, lpBuffer=0x2aafdcc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aafdcc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.174] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.175] WriteFile (in: hFile=0x788, lpBuffer=0x2ab0dd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab0dd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.175] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.175] WriteFile (in: hFile=0x788, lpBuffer=0x2ab1de4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab1de4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.176] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.176] WriteFile (in: hFile=0x788, lpBuffer=0x2ab2df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab2df0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.176] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.177] WriteFile (in: hFile=0x788, lpBuffer=0x2ab3dfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab3dfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.177] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.177] WriteFile (in: hFile=0x788, lpBuffer=0x2ab4e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab4e08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.178] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.179] WriteFile (in: hFile=0x788, lpBuffer=0x2ab5e14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab5e14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.179] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.180] WriteFile (in: hFile=0x788, lpBuffer=0x2ab6e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab6e20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.180] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.180] WriteFile (in: hFile=0x788, lpBuffer=0x2ab7e2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab7e2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.181] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.181] WriteFile (in: hFile=0x788, lpBuffer=0x2ab8e38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab8e38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.181] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.182] WriteFile (in: hFile=0x788, lpBuffer=0x2ab9e44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab9e44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.182] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.182] WriteFile (in: hFile=0x788, lpBuffer=0x2abae50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abae50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.182] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.183] WriteFile (in: hFile=0x788, lpBuffer=0x2abbe5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abbe5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.183] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.183] WriteFile (in: hFile=0x788, lpBuffer=0x2abce68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abce68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.184] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.184] WriteFile (in: hFile=0x788, lpBuffer=0x2abde74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abde74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.184] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.185] WriteFile (in: hFile=0x788, lpBuffer=0x2abee80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abee80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.185] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.185] WriteFile (in: hFile=0x788, lpBuffer=0x2abfe8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abfe8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.186] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.186] WriteFile (in: hFile=0x788, lpBuffer=0x2ac0e98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac0e98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.186] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.187] WriteFile (in: hFile=0x788, lpBuffer=0x2ac1ea4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac1ea4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.188] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.188] WriteFile (in: hFile=0x788, lpBuffer=0x2ac2eb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac2eb0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.189] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.189] WriteFile (in: hFile=0x788, lpBuffer=0x2ac3ebc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac3ebc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.189] ReadFile (in: hFile=0x78c, lpBuffer=0x2aad970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aad970*, lpNumberOfBytesRead=0xb3f1fc*=0xc19, lpOverlapped=0x0) returned 1 [0129.190] WriteFile (in: hFile=0x788, lpBuffer=0x2ac5ae4*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ac5ae4*, lpNumberOfBytesWritten=0xb3f1b4*=0xc20, lpOverlapped=0x0) returned 1 [0129.190] CloseHandle (hObject=0x788) returned 1 [0129.257] CloseHandle (hObject=0x78c) returned 1 [0129.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx", lpFilePart=0x0) returned 0x2a [0129.260] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\awjYBWWUUDv.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\awjybwwuudv.pptx")) returned 1 [0129.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx", lpFilePart=0x0) returned 0x23 [0129.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\dpdy.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0129.269] GetFileType (hFile=0x78c) returned 0x1 [0129.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.269] GetFileType (hFile=0x78c) returned 0x1 [0129.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx.P4WN3D", lpFilePart=0x0) returned 0x2a [0129.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.269] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\dpdy.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0129.270] GetFileType (hFile=0x788) returned 0x1 [0129.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.270] GetFileType (hFile=0x788) returned 0x1 [0129.270] SetEndOfFile (hFile=0x788) returned 1 [0129.270] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x11916 [0129.270] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.271] WriteFile (in: hFile=0x788, lpBuffer=0x2ac8c68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac8c68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.273] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.274] WriteFile (in: hFile=0x788, lpBuffer=0x2ac9c74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac9c74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.274] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.275] WriteFile (in: hFile=0x788, lpBuffer=0x2acac80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acac80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.275] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.275] WriteFile (in: hFile=0x788, lpBuffer=0x2acbc8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acbc8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.276] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.276] WriteFile (in: hFile=0x788, lpBuffer=0x2accc98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2accc98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.276] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.276] WriteFile (in: hFile=0x788, lpBuffer=0x2acdca4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acdca4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.276] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.277] WriteFile (in: hFile=0x788, lpBuffer=0x2acecb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acecb0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.277] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.277] WriteFile (in: hFile=0x788, lpBuffer=0x2acfcbc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acfcbc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.277] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.277] WriteFile (in: hFile=0x788, lpBuffer=0x2ad0cc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad0cc8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.278] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.278] WriteFile (in: hFile=0x788, lpBuffer=0x2ad1cd4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad1cd4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.278] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.278] WriteFile (in: hFile=0x788, lpBuffer=0x2ad2ce0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad2ce0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.278] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.279] WriteFile (in: hFile=0x788, lpBuffer=0x2ad3cec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad3cec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.279] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.279] WriteFile (in: hFile=0x788, lpBuffer=0x2ad4cf8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad4cf8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.279] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.280] WriteFile (in: hFile=0x788, lpBuffer=0x2ad5d04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad5d04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.280] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.280] WriteFile (in: hFile=0x788, lpBuffer=0x2ad6d10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad6d10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.280] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.280] WriteFile (in: hFile=0x788, lpBuffer=0x2ad7d1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad7d1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.280] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.281] WriteFile (in: hFile=0x788, lpBuffer=0x2ad8d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad8d28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.281] ReadFile (in: hFile=0x78c, lpBuffer=0x2ac7818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ac7818*, lpNumberOfBytesRead=0xb3f1fc*=0x916, lpOverlapped=0x0) returned 1 [0129.281] WriteFile (in: hFile=0x788, lpBuffer=0x2ada650*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ada650*, lpNumberOfBytesWritten=0xb3f1b4*=0x920, lpOverlapped=0x0) returned 1 [0129.281] CloseHandle (hObject=0x788) returned 1 [0129.284] CloseHandle (hObject=0x78c) returned 1 [0129.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx", lpFilePart=0x0) returned 0x23 [0129.286] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\DPDy.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\dpdy.pptx")) returned 1 [0129.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx", lpFilePart=0x0) returned 0x2b [0129.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.291] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ewln28piwgde.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0129.292] GetFileType (hFile=0x78c) returned 0x1 [0129.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.292] GetFileType (hFile=0x78c) returned 0x1 [0129.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx.P4WN3D", lpFilePart=0x0) returned 0x32 [0129.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\ewln28piwgde.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0129.292] GetFileType (hFile=0x788) returned 0x1 [0129.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.292] GetFileType (hFile=0x788) returned 0x1 [0129.292] SetEndOfFile (hFile=0x788) returned 1 [0129.293] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x680d [0129.293] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.294] WriteFile (in: hFile=0x788, lpBuffer=0x2add808*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2add808*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.295] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.295] WriteFile (in: hFile=0x788, lpBuffer=0x2ade814*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ade814*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.295] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.295] WriteFile (in: hFile=0x788, lpBuffer=0x2adf820*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2adf820*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.296] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.296] WriteFile (in: hFile=0x788, lpBuffer=0x2ae082c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae082c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.296] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.296] WriteFile (in: hFile=0x788, lpBuffer=0x2ae1838*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae1838*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.297] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.297] WriteFile (in: hFile=0x788, lpBuffer=0x2ae2844*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae2844*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.297] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x80d, lpOverlapped=0x0) returned 1 [0129.297] WriteFile (in: hFile=0x788, lpBuffer=0x2ae405c*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ae405c*, lpNumberOfBytesWritten=0xb3f1b4*=0x810, lpOverlapped=0x0) returned 1 [0129.297] CloseHandle (hObject=0x788) returned 1 [0129.300] CloseHandle (hObject=0x78c) returned 1 [0129.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx", lpFilePart=0x0) returned 0x2b [0129.302] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\EwLN28PIWgDe.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ewln28piwgde.pptx")) returned 1 [0129.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc", lpFilePart=0x0) returned 0x27 [0129.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc" (normalized: "c:\\users\\fd1hvy\\documents\\fko8qiwfn.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0129.433] GetFileType (hFile=0x78c) returned 0x1 [0129.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.433] GetFileType (hFile=0x78c) returned 0x1 [0129.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc.P4WN3D", lpFilePart=0x0) returned 0x2e [0129.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\fko8qiwfn.doc.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0129.434] GetFileType (hFile=0x788) returned 0x1 [0129.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.434] GetFileType (hFile=0x788) returned 0x1 [0129.434] SetEndOfFile (hFile=0x788) returned 1 [0129.434] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x5118 [0129.435] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae5db4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae5db4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.436] WriteFile (in: hFile=0x788, lpBuffer=0x2ae7204*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae7204*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.437] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae5db4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae5db4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.438] WriteFile (in: hFile=0x788, lpBuffer=0x2ae8210*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae8210*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.438] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae5db4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae5db4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.439] WriteFile (in: hFile=0x788, lpBuffer=0x2ae921c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae921c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.439] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae5db4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae5db4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.439] WriteFile (in: hFile=0x788, lpBuffer=0x2aea228*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aea228*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.439] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae5db4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae5db4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.440] WriteFile (in: hFile=0x788, lpBuffer=0x2aeb234*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aeb234*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.440] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae5db4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae5db4*, lpNumberOfBytesRead=0xb3f1fc*=0x118, lpOverlapped=0x0) returned 1 [0129.440] WriteFile (in: hFile=0x788, lpBuffer=0x2aec35c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2aec35c*, lpNumberOfBytesWritten=0xb3f1b4*=0x120, lpOverlapped=0x0) returned 1 [0129.441] CloseHandle (hObject=0x788) returned 1 [0129.445] CloseHandle (hObject=0x78c) returned 1 [0129.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc", lpFilePart=0x0) returned 0x27 [0129.449] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\fko8QIWFn.doc" (normalized: "c:\\users\\fd1hvy\\documents\\fko8qiwfn.doc")) returned 1 [0129.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx", lpFilePart=0x0) returned 0x2c [0129.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jaxyw3x-tjrrf.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0129.666] GetFileType (hFile=0x78c) returned 0x1 [0129.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.666] GetFileType (hFile=0x78c) returned 0x1 [0129.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx.P4WN3D", lpFilePart=0x0) returned 0x33 [0129.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\jaxyw3x-tjrrf.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0129.667] GetFileType (hFile=0x788) returned 0x1 [0129.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.667] GetFileType (hFile=0x788) returned 0x1 [0129.667] SetEndOfFile (hFile=0x788) returned 1 [0129.667] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x104a [0129.668] ReadFile (in: hFile=0x78c, lpBuffer=0x2aee0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aee0d8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.669] WriteFile (in: hFile=0x788, lpBuffer=0x2aef528*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aef528*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.670] ReadFile (in: hFile=0x78c, lpBuffer=0x2aee0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aee0d8*, lpNumberOfBytesRead=0xb3f1fc*=0x4a, lpOverlapped=0x0) returned 1 [0129.670] WriteFile (in: hFile=0x788, lpBuffer=0x2af0580*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2af0580*, lpNumberOfBytesWritten=0xb3f1b4*=0x50, lpOverlapped=0x0) returned 1 [0129.671] CloseHandle (hObject=0x788) returned 1 [0129.673] CloseHandle (hObject=0x78c) returned 1 [0129.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx", lpFilePart=0x0) returned 0x2c [0129.678] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JAxyw3x-tJrrF.docx" (normalized: "c:\\users\\fd1hvy\\documents\\jaxyw3x-tjrrf.docx")) returned 1 [0129.734] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx", lpFilePart=0x0) returned 0x26 [0129.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.734] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx" (normalized: "c:\\users\\fd1hvy\\documents\\oruo9aw.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0129.735] GetFileType (hFile=0x78c) returned 0x1 [0129.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.735] GetFileType (hFile=0x78c) returned 0x1 [0129.735] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx.P4WN3D", lpFilePart=0x0) returned 0x2d [0129.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0129.735] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\oruo9aw.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0129.735] GetFileType (hFile=0x788) returned 0x1 [0129.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0129.735] GetFileType (hFile=0x788) returned 0x1 [0129.736] SetEndOfFile (hFile=0x788) returned 1 [0129.736] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1f8d [0129.736] ReadFile (in: hFile=0x78c, lpBuffer=0x2af22d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af22d8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0129.737] WriteFile (in: hFile=0x788, lpBuffer=0x2af3728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af3728*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0129.739] ReadFile (in: hFile=0x78c, lpBuffer=0x2af22d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af22d8*, lpNumberOfBytesRead=0xb3f1fc*=0xf8d, lpOverlapped=0x0) returned 1 [0129.739] WriteFile (in: hFile=0x788, lpBuffer=0x2af56c0*, nNumberOfBytesToWrite=0xf90, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2af56c0*, lpNumberOfBytesWritten=0xb3f1b4*=0xf90, lpOverlapped=0x0) returned 1 [0129.739] CloseHandle (hObject=0x788) returned 1 [0130.010] CloseHandle (hObject=0x78c) returned 1 [0130.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx", lpFilePart=0x0) returned 0x26 [0130.016] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\OruO9Aw.docx" (normalized: "c:\\users\\fd1hvy\\documents\\oruo9aw.docx")) returned 1 [0130.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx", lpFilePart=0x0) returned 0x29 [0130.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.138] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qh7qu7_fer.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0130.138] GetFileType (hFile=0x78c) returned 0x1 [0130.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.138] GetFileType (hFile=0x78c) returned 0x1 [0130.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx.P4WN3D", lpFilePart=0x0) returned 0x30 [0130.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.139] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\qh7qu7_fer.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0130.139] GetFileType (hFile=0x788) returned 0x1 [0130.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.139] GetFileType (hFile=0x788) returned 0x1 [0130.139] SetEndOfFile (hFile=0x788) returned 1 [0130.140] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x904b [0130.140] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.141] WriteFile (in: hFile=0x788, lpBuffer=0x2af886c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af886c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.143] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.143] WriteFile (in: hFile=0x788, lpBuffer=0x2af9878*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af9878*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.143] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.148] WriteFile (in: hFile=0x788, lpBuffer=0x2afa884*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afa884*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.149] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.149] WriteFile (in: hFile=0x788, lpBuffer=0x2afb890*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afb890*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.150] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.151] WriteFile (in: hFile=0x788, lpBuffer=0x2afc89c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afc89c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.152] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.152] WriteFile (in: hFile=0x788, lpBuffer=0x2afd8a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afd8a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.152] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.153] WriteFile (in: hFile=0x788, lpBuffer=0x2afe8b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afe8b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.153] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.153] WriteFile (in: hFile=0x788, lpBuffer=0x2aff8c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aff8c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.154] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.154] WriteFile (in: hFile=0x788, lpBuffer=0x2b008cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b008cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.154] ReadFile (in: hFile=0x78c, lpBuffer=0x2af741c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2af741c*, lpNumberOfBytesRead=0xb3f1fc*=0x4b, lpOverlapped=0x0) returned 1 [0130.155] WriteFile (in: hFile=0x788, lpBuffer=0x2b01924*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b01924*, lpNumberOfBytesWritten=0xb3f1b4*=0x50, lpOverlapped=0x0) returned 1 [0130.155] CloseHandle (hObject=0x788) returned 1 [0130.157] CloseHandle (hObject=0x78c) returned 1 [0130.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx", lpFilePart=0x0) returned 0x29 [0130.160] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\qh7qU7_Fer.docx" (normalized: "c:\\users\\fd1hvy\\documents\\qh7qu7_fer.docx")) returned 1 [0130.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx", lpFilePart=0x0) returned 0x2d [0130.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.296] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\t6tgyvpcgpe2uw.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0130.296] GetFileType (hFile=0x78c) returned 0x1 [0130.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.296] GetFileType (hFile=0x78c) returned 0x1 [0130.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx.P4WN3D", lpFilePart=0x0) returned 0x34 [0130.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.296] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\t6tgyvpcgpe2uw.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0130.297] GetFileType (hFile=0x788) returned 0x1 [0130.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.297] GetFileType (hFile=0x788) returned 0x1 [0130.297] SetEndOfFile (hFile=0x788) returned 1 [0130.297] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x6e38 [0130.298] ReadFile (in: hFile=0x78c, lpBuffer=0x2b036b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b036b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.299] WriteFile (in: hFile=0x788, lpBuffer=0x2b04b04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b04b04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.300] ReadFile (in: hFile=0x78c, lpBuffer=0x2b036b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b036b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.300] WriteFile (in: hFile=0x788, lpBuffer=0x2b05b10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b05b10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.300] ReadFile (in: hFile=0x78c, lpBuffer=0x2b036b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b036b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.301] WriteFile (in: hFile=0x788, lpBuffer=0x2b06b1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b06b1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.301] ReadFile (in: hFile=0x78c, lpBuffer=0x2b036b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b036b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.301] WriteFile (in: hFile=0x788, lpBuffer=0x2b07b28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b07b28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.301] ReadFile (in: hFile=0x78c, lpBuffer=0x2b036b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b036b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.302] WriteFile (in: hFile=0x788, lpBuffer=0x2b08b34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b08b34*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.302] ReadFile (in: hFile=0x78c, lpBuffer=0x2b036b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b036b4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.302] WriteFile (in: hFile=0x788, lpBuffer=0x2b09b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b09b40*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.303] ReadFile (in: hFile=0x78c, lpBuffer=0x2b036b4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b036b4*, lpNumberOfBytesRead=0xb3f1fc*=0xe38, lpOverlapped=0x0) returned 1 [0130.303] WriteFile (in: hFile=0x788, lpBuffer=0x2b0b988*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b0b988*, lpNumberOfBytesWritten=0xb3f1b4*=0xe40, lpOverlapped=0x0) returned 1 [0130.303] CloseHandle (hObject=0x788) returned 1 [0130.308] CloseHandle (hObject=0x78c) returned 1 [0130.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx", lpFilePart=0x0) returned 0x2d [0130.310] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T6TgyvPCgPe2UW.docx" (normalized: "c:\\users\\fd1hvy\\documents\\t6tgyvpcgpe2uw.docx")) returned 1 [0130.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx", lpFilePart=0x0) returned 0x2e [0130.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx" (normalized: "c:\\users\\fd1hvy\\documents\\vqec4xk8qqsfnx3.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0130.314] GetFileType (hFile=0x78c) returned 0x1 [0130.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.314] GetFileType (hFile=0x78c) returned 0x1 [0130.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx.P4WN3D", lpFilePart=0x0) returned 0x35 [0130.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\vqec4xk8qqsfnx3.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0130.315] GetFileType (hFile=0x788) returned 0x1 [0130.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.315] GetFileType (hFile=0x788) returned 0x1 [0130.315] SetEndOfFile (hFile=0x788) returned 1 [0130.315] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x4fbc [0130.315] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0d730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0d730*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.316] WriteFile (in: hFile=0x788, lpBuffer=0x2b0eb80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0eb80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.317] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0d730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0d730*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.318] WriteFile (in: hFile=0x788, lpBuffer=0x2b0fb8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0fb8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.318] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0d730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0d730*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.318] WriteFile (in: hFile=0x788, lpBuffer=0x2b10b98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b10b98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.318] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0d730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0d730*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.319] WriteFile (in: hFile=0x788, lpBuffer=0x2b11ba4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b11ba4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.319] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0d730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0d730*, lpNumberOfBytesRead=0xb3f1fc*=0xfbc, lpOverlapped=0x0) returned 1 [0130.319] WriteFile (in: hFile=0x788, lpBuffer=0x2b13b6c*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b13b6c*, lpNumberOfBytesWritten=0xb3f1b4*=0xfc0, lpOverlapped=0x0) returned 1 [0130.319] CloseHandle (hObject=0x788) returned 1 [0130.433] CloseHandle (hObject=0x78c) returned 1 [0130.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx", lpFilePart=0x0) returned 0x2e [0130.435] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\VqeC4xk8qQsfNx3.docx" (normalized: "c:\\users\\fd1hvy\\documents\\vqec4xk8qqsfnx3.docx")) returned 1 [0130.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0130.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0130.528] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581beb0 [0130.529] FindNextFileW (in: hFindFile=0x581beb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.530] FindNextFileW (in: hFindFile=0x581beb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0130.530] FindNextFileW (in: hFindFile=0x581beb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 0 [0130.531] FindClose (in: hFindFile=0x581beb0 | out: hFindFile=0x581beb0) returned 1 [0130.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0130.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0130.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0130.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0130.531] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581c2b0 [0130.531] FindNextFileW (in: hFindFile=0x581c2b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x5ee892ad, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.532] FindNextFileW (in: hFindFile=0x581c2b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x67d00605, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0130.532] FindNextFileW (in: hFindFile=0x581c2b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.532] FindClose (in: hFindFile=0x581c2b0 | out: hFindFile=0x581c2b0) returned 1 [0130.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0130.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0130.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0130.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0130.534] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0130.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0130.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0130.537] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581c0b0 [0130.538] FindNextFileW (in: hFindFile=0x581c0b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.539] FindNextFileW (in: hFindFile=0x581c0b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.539] FindNextFileW (in: hFindFile=0x581c0b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0130.539] FindNextFileW (in: hFindFile=0x581c0b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0130.539] FindNextFileW (in: hFindFile=0x581c0b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.539] FindClose (in: hFindFile=0x581c0b0 | out: hFindFile=0x581c0b0) returned 1 [0130.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0130.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0130.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0130.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0130.540] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581bf70 [0130.541] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.541] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.541] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0130.541] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0130.541] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0130.541] FindClose (in: hFindFile=0x581bf70 | out: hFindFile=0x581bf70) returned 1 [0130.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0130.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0130.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0130.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0130.543] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581c2b0 [0130.544] FindNextFileW (in: hFindFile=0x581c2b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.545] FindNextFileW (in: hFindFile=0x581c2b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0130.545] FindNextFileW (in: hFindFile=0x581c2b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0130.545] FindClose (in: hFindFile=0x581c2b0 | out: hFindFile=0x581c2b0) returned 1 [0130.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0130.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0130.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0130.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0130.545] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581beb0 [0130.546] FindNextFileW (in: hFindFile=0x581beb0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.546] FindNextFileW (in: hFindFile=0x581beb0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0130.546] FindNextFileW (in: hFindFile=0x581beb0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.546] FindClose (in: hFindFile=0x581beb0 | out: hFindFile=0x581beb0) returned 1 [0130.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0130.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0130.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0130.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0130.548] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0130.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0130.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0130.551] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0130.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0130.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0130.554] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY", lpFilePart=0x0) returned 0x2a [0130.554] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9edf4f0, ftCreationTime.dwHighDateTime=0x1d5e7c4, ftLastAccessTime.dwLowDateTime=0xbc9f0000, ftLastAccessTime.dwHighDateTime=0x1d5ea14, ftLastWriteTime.dwLowDateTime=0xbc9f0000, ftLastWriteTime.dwHighDateTime=0x1d5ea14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581bb30 [0130.554] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9edf4f0, ftCreationTime.dwHighDateTime=0x1d5e7c4, ftLastAccessTime.dwLowDateTime=0xbc9f0000, ftLastAccessTime.dwHighDateTime=0x1d5ea14, ftLastWriteTime.dwLowDateTime=0xbc9f0000, ftLastWriteTime.dwHighDateTime=0x1d5ea14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.554] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90f0340, ftCreationTime.dwHighDateTime=0x1d5e726, ftLastAccessTime.dwLowDateTime=0x424840, ftLastAccessTime.dwHighDateTime=0x1d5ea1e, ftLastWriteTime.dwLowDateTime=0x424840, ftLastWriteTime.dwHighDateTime=0x1d5ea1e, nFileSizeHigh=0x0, nFileSizeLow=0x18147, dwReserved0=0x0, dwReserved1=0x0, cFileName="0tw tUuSH2WNk1z.ppt", cAlternateFileName="0TWTUU~1.PPT")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9eb9760, ftCreationTime.dwHighDateTime=0x1d5e652, ftLastAccessTime.dwLowDateTime=0x57e2c740, ftLastAccessTime.dwHighDateTime=0x1d5e597, ftLastWriteTime.dwLowDateTime=0x57e2c740, ftLastWriteTime.dwHighDateTime=0x1d5e597, nFileSizeHigh=0x0, nFileSizeLow=0xb4c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="1ckS1JjaF.docx", cAlternateFileName="1CKS1J~1.DOC")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a1d5910, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xb95d8d10, ftLastAccessTime.dwHighDateTime=0x1d5e755, ftLastWriteTime.dwLowDateTime=0xb95d8d10, ftLastWriteTime.dwHighDateTime=0x1d5e755, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kJ4g3dOlN66IH-", cAlternateFileName="KJ4G3D~1")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7876a860, ftCreationTime.dwHighDateTime=0x1d5eaff, ftLastAccessTime.dwLowDateTime=0x60c1e110, ftLastAccessTime.dwHighDateTime=0x1d5e15b, ftLastWriteTime.dwLowDateTime=0x60c1e110, ftLastWriteTime.dwHighDateTime=0x1d5e15b, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="L_3wAYxyuPbREwdvYkfU.odt", cAlternateFileName="L_3WAY~1.ODT")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33078b30, ftCreationTime.dwHighDateTime=0x1d5eea3, ftLastAccessTime.dwLowDateTime=0x231292c0, ftLastAccessTime.dwHighDateTime=0x1d5efb0, ftLastWriteTime.dwLowDateTime=0x231292c0, ftLastWriteTime.dwHighDateTime=0x1d5efb0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qoNQhW", cAlternateFileName="")) returned 1 [0130.555] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adf9da0, ftCreationTime.dwHighDateTime=0x1d5ed3f, ftLastAccessTime.dwLowDateTime=0xdbe27880, ftLastAccessTime.dwHighDateTime=0x1d5e2e8, ftLastWriteTime.dwLowDateTime=0xdbe27880, ftLastWriteTime.dwHighDateTime=0x1d5e2e8, nFileSizeHigh=0x0, nFileSizeLow=0x278e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RRubIgJmhLVc4Db7Oon.csv", cAlternateFileName="RRUBIG~1.CSV")) returned 1 [0130.744] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9741df0, ftCreationTime.dwHighDateTime=0x1d5e58a, ftLastAccessTime.dwLowDateTime=0x9f4921c0, ftLastAccessTime.dwHighDateTime=0x1d5ebd1, ftLastWriteTime.dwLowDateTime=0x9f4921c0, ftLastWriteTime.dwHighDateTime=0x1d5ebd1, nFileSizeHigh=0x0, nFileSizeLow=0x18f35, dwReserved0=0x0, dwReserved1=0x0, cFileName="sFhatw5S.ods", cAlternateFileName="")) returned 1 [0130.745] FindNextFileW (in: hFindFile=0x581bb30, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9741df0, ftCreationTime.dwHighDateTime=0x1d5e58a, ftLastAccessTime.dwLowDateTime=0x9f4921c0, ftLastAccessTime.dwHighDateTime=0x1d5ebd1, ftLastWriteTime.dwLowDateTime=0x9f4921c0, ftLastWriteTime.dwHighDateTime=0x1d5ebd1, nFileSizeHigh=0x0, nFileSizeLow=0x18f35, dwReserved0=0x0, dwReserved1=0x0, cFileName="sFhatw5S.ods", cAlternateFileName="")) returned 0 [0130.745] FindClose (in: hFindFile=0x581bb30 | out: hFindFile=0x581bb30) returned 1 [0130.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0130.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0130.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0130.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY", lpFilePart=0x0) returned 0x2a [0130.746] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9edf4f0, ftCreationTime.dwHighDateTime=0x1d5e7c4, ftLastAccessTime.dwLowDateTime=0xbc9f0000, ftLastAccessTime.dwHighDateTime=0x1d5ea14, ftLastWriteTime.dwLowDateTime=0xbc9f0000, ftLastWriteTime.dwHighDateTime=0x1d5ea14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581bcf0 [0130.746] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe9edf4f0, ftCreationTime.dwHighDateTime=0x1d5e7c4, ftLastAccessTime.dwLowDateTime=0xbc9f0000, ftLastAccessTime.dwHighDateTime=0x1d5ea14, ftLastWriteTime.dwLowDateTime=0xbc9f0000, ftLastWriteTime.dwHighDateTime=0x1d5ea14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.747] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb90f0340, ftCreationTime.dwHighDateTime=0x1d5e726, ftLastAccessTime.dwLowDateTime=0x424840, ftLastAccessTime.dwHighDateTime=0x1d5ea1e, ftLastWriteTime.dwLowDateTime=0x424840, ftLastWriteTime.dwHighDateTime=0x1d5ea1e, nFileSizeHigh=0x0, nFileSizeLow=0x18147, dwReserved0=0x0, dwReserved1=0x0, cFileName="0tw tUuSH2WNk1z.ppt", cAlternateFileName="0TWTUU~1.PPT")) returned 1 [0130.747] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9eb9760, ftCreationTime.dwHighDateTime=0x1d5e652, ftLastAccessTime.dwLowDateTime=0x57e2c740, ftLastAccessTime.dwHighDateTime=0x1d5e597, ftLastWriteTime.dwLowDateTime=0x57e2c740, ftLastWriteTime.dwHighDateTime=0x1d5e597, nFileSizeHigh=0x0, nFileSizeLow=0xb4c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="1ckS1JjaF.docx", cAlternateFileName="1CKS1J~1.DOC")) returned 1 [0130.747] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a1d5910, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xb95d8d10, ftLastAccessTime.dwHighDateTime=0x1d5e755, ftLastWriteTime.dwLowDateTime=0xb95d8d10, ftLastWriteTime.dwHighDateTime=0x1d5e755, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kJ4g3dOlN66IH-", cAlternateFileName="KJ4G3D~1")) returned 1 [0130.747] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7876a860, ftCreationTime.dwHighDateTime=0x1d5eaff, ftLastAccessTime.dwLowDateTime=0x60c1e110, ftLastAccessTime.dwHighDateTime=0x1d5e15b, ftLastWriteTime.dwLowDateTime=0x60c1e110, ftLastWriteTime.dwHighDateTime=0x1d5e15b, nFileSizeHigh=0x0, nFileSizeLow=0x1b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="L_3wAYxyuPbREwdvYkfU.odt", cAlternateFileName="L_3WAY~1.ODT")) returned 1 [0130.747] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33078b30, ftCreationTime.dwHighDateTime=0x1d5eea3, ftLastAccessTime.dwLowDateTime=0x231292c0, ftLastAccessTime.dwHighDateTime=0x1d5efb0, ftLastWriteTime.dwLowDateTime=0x231292c0, ftLastWriteTime.dwHighDateTime=0x1d5efb0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qoNQhW", cAlternateFileName="")) returned 1 [0130.748] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6adf9da0, ftCreationTime.dwHighDateTime=0x1d5ed3f, ftLastAccessTime.dwLowDateTime=0xdbe27880, ftLastAccessTime.dwHighDateTime=0x1d5e2e8, ftLastWriteTime.dwLowDateTime=0xdbe27880, ftLastWriteTime.dwHighDateTime=0x1d5e2e8, nFileSizeHigh=0x0, nFileSizeLow=0x278e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RRubIgJmhLVc4Db7Oon.csv", cAlternateFileName="RRUBIG~1.CSV")) returned 1 [0130.748] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9741df0, ftCreationTime.dwHighDateTime=0x1d5e58a, ftLastAccessTime.dwLowDateTime=0x9f4921c0, ftLastAccessTime.dwHighDateTime=0x1d5ebd1, ftLastWriteTime.dwLowDateTime=0x9f4921c0, ftLastWriteTime.dwHighDateTime=0x1d5ebd1, nFileSizeHigh=0x0, nFileSizeLow=0x18f35, dwReserved0=0x0, dwReserved1=0x0, cFileName="sFhatw5S.ods", cAlternateFileName="")) returned 1 [0130.748] FindNextFileW (in: hFindFile=0x581bcf0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.748] FindClose (in: hFindFile=0x581bcf0 | out: hFindFile=0x581bcf0) returned 1 [0130.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0130.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0130.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt", lpFilePart=0x0) returned 0x3e [0130.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\0tw tuush2wnk1z.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0130.753] GetFileType (hFile=0x78c) returned 0x1 [0130.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.753] GetFileType (hFile=0x78c) returned 0x1 [0130.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt.P4WN3D", lpFilePart=0x0) returned 0x45 [0130.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\0tw tuush2wnk1z.ppt.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0130.754] GetFileType (hFile=0x788) returned 0x1 [0130.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.754] GetFileType (hFile=0x788) returned 0x1 [0130.755] SetEndOfFile (hFile=0x788) returned 1 [0130.755] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x18147 [0130.755] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.756] WriteFile (in: hFile=0x788, lpBuffer=0x2b20510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b20510*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.758] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.758] WriteFile (in: hFile=0x788, lpBuffer=0x2b2151c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2151c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.758] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.759] WriteFile (in: hFile=0x788, lpBuffer=0x2b22528*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b22528*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.759] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.760] WriteFile (in: hFile=0x788, lpBuffer=0x2b23534*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b23534*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.760] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.760] WriteFile (in: hFile=0x788, lpBuffer=0x2b24540*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b24540*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.761] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.761] WriteFile (in: hFile=0x788, lpBuffer=0x2b2554c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2554c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.761] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.762] WriteFile (in: hFile=0x788, lpBuffer=0x2b26558*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b26558*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.762] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.762] WriteFile (in: hFile=0x788, lpBuffer=0x2b27564*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b27564*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.762] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.763] WriteFile (in: hFile=0x788, lpBuffer=0x2b28570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b28570*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.763] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.763] WriteFile (in: hFile=0x788, lpBuffer=0x2b2957c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2957c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.764] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.764] WriteFile (in: hFile=0x788, lpBuffer=0x2b2a588*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2a588*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.764] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.764] WriteFile (in: hFile=0x788, lpBuffer=0x2b2b594*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2b594*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.765] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.765] WriteFile (in: hFile=0x788, lpBuffer=0x2b2c5a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2c5a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.765] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.766] WriteFile (in: hFile=0x788, lpBuffer=0x2b2d5ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2d5ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.766] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.766] WriteFile (in: hFile=0x788, lpBuffer=0x2b2e5b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2e5b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.766] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.767] WriteFile (in: hFile=0x788, lpBuffer=0x2b2f5c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2f5c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.767] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.767] WriteFile (in: hFile=0x788, lpBuffer=0x2b305d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b305d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.767] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.768] WriteFile (in: hFile=0x788, lpBuffer=0x2b315dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b315dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.768] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.769] WriteFile (in: hFile=0x788, lpBuffer=0x2b325e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b325e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.769] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.769] WriteFile (in: hFile=0x788, lpBuffer=0x2b335f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b335f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.769] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.770] WriteFile (in: hFile=0x788, lpBuffer=0x2b34600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b34600*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.770] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.770] WriteFile (in: hFile=0x788, lpBuffer=0x2b3560c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3560c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.770] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.771] WriteFile (in: hFile=0x788, lpBuffer=0x2b36618*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b36618*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.771] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.771] WriteFile (in: hFile=0x788, lpBuffer=0x2b37624*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b37624*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.772] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1f0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1f0c0*, lpNumberOfBytesRead=0xb3f1fc*=0x147, lpOverlapped=0x0) returned 1 [0130.772] WriteFile (in: hFile=0x788, lpBuffer=0x2b3877c*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b3877c*, lpNumberOfBytesWritten=0xb3f1b4*=0x150, lpOverlapped=0x0) returned 1 [0130.772] CloseHandle (hObject=0x788) returned 1 [0130.854] CloseHandle (hObject=0x78c) returned 1 [0130.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt", lpFilePart=0x0) returned 0x3e [0130.857] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\0tw tUuSH2WNk1z.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\0tw tuush2wnk1z.ppt")) returned 1 [0130.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx", lpFilePart=0x0) returned 0x39 [0130.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.921] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\1cks1jjaf.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0130.921] GetFileType (hFile=0x78c) returned 0x1 [0130.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.922] GetFileType (hFile=0x78c) returned 0x1 [0130.922] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx.P4WN3D", lpFilePart=0x0) returned 0x40 [0130.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0130.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\1cks1jjaf.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0130.922] GetFileType (hFile=0x788) returned 0x1 [0130.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0130.923] GetFileType (hFile=0x788) returned 0x1 [0130.923] SetEndOfFile (hFile=0x788) returned 1 [0130.929] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xb4c1 [0130.929] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.930] WriteFile (in: hFile=0x788, lpBuffer=0x2b3b9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3b9c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.932] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.933] WriteFile (in: hFile=0x788, lpBuffer=0x2b3c9d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3c9d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.933] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.933] WriteFile (in: hFile=0x788, lpBuffer=0x2b3d9e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3d9e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.934] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.934] WriteFile (in: hFile=0x788, lpBuffer=0x2b3e9ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3e9ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.934] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.935] WriteFile (in: hFile=0x788, lpBuffer=0x2b3f9f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3f9f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.935] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.935] WriteFile (in: hFile=0x788, lpBuffer=0x2b40a04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b40a04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.935] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.936] WriteFile (in: hFile=0x788, lpBuffer=0x2b41a10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b41a10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.936] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.936] WriteFile (in: hFile=0x788, lpBuffer=0x2b42a1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b42a1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.937] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.937] WriteFile (in: hFile=0x788, lpBuffer=0x2b43a28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b43a28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.937] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.938] WriteFile (in: hFile=0x788, lpBuffer=0x2b44a34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b44a34*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.938] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0130.938] WriteFile (in: hFile=0x788, lpBuffer=0x2b45a40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b45a40*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0130.938] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3a578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3a578*, lpNumberOfBytesRead=0xb3f1fc*=0x4c1, lpOverlapped=0x0) returned 1 [0130.939] WriteFile (in: hFile=0x788, lpBuffer=0x2b46f18*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b46f18*, lpNumberOfBytesWritten=0xb3f1b4*=0x4d0, lpOverlapped=0x0) returned 1 [0130.939] CloseHandle (hObject=0x788) returned 1 [0131.133] CloseHandle (hObject=0x78c) returned 1 [0131.136] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx", lpFilePart=0x0) returned 0x39 [0131.136] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\1ckS1JjaF.docx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\1cks1jjaf.docx")) returned 1 [0131.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0131.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW", lpFilePart=0x0) returned 0x31 [0131.229] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33078b30, ftCreationTime.dwHighDateTime=0x1d5eea3, ftLastAccessTime.dwLowDateTime=0x231292c0, ftLastAccessTime.dwHighDateTime=0x1d5efb0, ftLastWriteTime.dwLowDateTime=0x231292c0, ftLastWriteTime.dwHighDateTime=0x1d5efb0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581bf70 [0131.229] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33078b30, ftCreationTime.dwHighDateTime=0x1d5eea3, ftLastAccessTime.dwLowDateTime=0x231292c0, ftLastAccessTime.dwHighDateTime=0x1d5efb0, ftLastWriteTime.dwLowDateTime=0x231292c0, ftLastWriteTime.dwHighDateTime=0x1d5efb0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.229] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6139ca0, ftCreationTime.dwHighDateTime=0x1d5e66d, ftLastAccessTime.dwLowDateTime=0x9b4ce620, ftLastAccessTime.dwHighDateTime=0x1d5eb8a, ftLastWriteTime.dwLowDateTime=0x9b4ce620, ftLastWriteTime.dwHighDateTime=0x1d5eb8a, nFileSizeHigh=0x0, nFileSizeLow=0x16c0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="gi-gn-ceSP.xlsx", cAlternateFileName="GI-GN-~1.XLS")) returned 1 [0131.230] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf165f60, ftCreationTime.dwHighDateTime=0x1d5e3ea, ftLastAccessTime.dwLowDateTime=0x68850540, ftLastAccessTime.dwHighDateTime=0x1d5ed12, ftLastWriteTime.dwLowDateTime=0x68850540, ftLastWriteTime.dwHighDateTime=0x1d5ed12, nFileSizeHigh=0x0, nFileSizeLow=0x12ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="itZvIe.rtf", cAlternateFileName="")) returned 1 [0131.230] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x476112f0, ftCreationTime.dwHighDateTime=0x1d5e7c7, ftLastAccessTime.dwLowDateTime=0x16e4ed10, ftLastAccessTime.dwHighDateTime=0x1d5e43c, ftLastWriteTime.dwLowDateTime=0x16e4ed10, ftLastWriteTime.dwHighDateTime=0x1d5e43c, nFileSizeHigh=0x0, nFileSizeLow=0x12e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="nar wE503o5iNw.pps", cAlternateFileName="NARWE5~1.PPS")) returned 1 [0131.230] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf149d00, ftCreationTime.dwHighDateTime=0x1d5e877, ftLastAccessTime.dwLowDateTime=0xe544540, ftLastAccessTime.dwHighDateTime=0x1d5e9d4, ftLastWriteTime.dwLowDateTime=0xe544540, ftLastWriteTime.dwHighDateTime=0x1d5e9d4, nFileSizeHigh=0x0, nFileSizeLow=0x4eef, dwReserved0=0x0, dwReserved1=0x0, cFileName="oqIOz6iz.doc", cAlternateFileName="")) returned 1 [0131.230] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f151640, ftCreationTime.dwHighDateTime=0x1d5e899, ftLastAccessTime.dwLowDateTime=0x37211630, ftLastAccessTime.dwHighDateTime=0x1d5ef13, ftLastWriteTime.dwLowDateTime=0x37211630, ftLastWriteTime.dwHighDateTime=0x1d5ef13, nFileSizeHigh=0x0, nFileSizeLow=0x10995, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSAY1cgEX.pdf", cAlternateFileName="PSAY1C~1.PDF")) returned 1 [0131.230] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfcd5b0, ftCreationTime.dwHighDateTime=0x1d5e2d2, ftLastAccessTime.dwLowDateTime=0xc92f31a0, ftLastAccessTime.dwHighDateTime=0x1d5e2bc, ftLastWriteTime.dwLowDateTime=0xc92f31a0, ftLastWriteTime.dwHighDateTime=0x1d5e2bc, nFileSizeHigh=0x0, nFileSizeLow=0x6442, dwReserved0=0x0, dwReserved1=0x0, cFileName="pwAyObt8RNfNX8YXKy4Y.pptx", cAlternateFileName="PWAYOB~1.PPT")) returned 1 [0131.231] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3f72f0, ftCreationTime.dwHighDateTime=0x1d5ebc9, ftLastAccessTime.dwLowDateTime=0xddf7cc30, ftLastAccessTime.dwHighDateTime=0x1d5e462, ftLastWriteTime.dwLowDateTime=0xddf7cc30, ftLastWriteTime.dwHighDateTime=0x1d5e462, nFileSizeHigh=0x0, nFileSizeLow=0x205b, dwReserved0=0x0, dwReserved1=0x0, cFileName="umbEdP0Ss9TgE S.xls", cAlternateFileName="UMBEDP~1.XLS")) returned 1 [0131.231] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a62350, ftCreationTime.dwHighDateTime=0x1d5ea5b, ftLastAccessTime.dwLowDateTime=0xaaf87f10, ftLastAccessTime.dwHighDateTime=0x1d5eab5, ftLastWriteTime.dwLowDateTime=0xaaf87f10, ftLastWriteTime.dwHighDateTime=0x1d5eab5, nFileSizeHigh=0x0, nFileSizeLow=0x14c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="xBrD3v.ots", cAlternateFileName="")) returned 1 [0131.231] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4b7b60, ftCreationTime.dwHighDateTime=0x1d5eced, ftLastAccessTime.dwLowDateTime=0x25fbc080, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x25fbc080, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c21, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z37OH.xls", cAlternateFileName="")) returned 1 [0131.231] FindNextFileW (in: hFindFile=0x581bf70, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4b7b60, ftCreationTime.dwHighDateTime=0x1d5eced, ftLastAccessTime.dwLowDateTime=0x25fbc080, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x25fbc080, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c21, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z37OH.xls", cAlternateFileName="")) returned 0 [0131.232] FindClose (in: hFindFile=0x581bf70 | out: hFindFile=0x581bf70) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0131.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW", lpFilePart=0x0) returned 0x31 [0131.232] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33078b30, ftCreationTime.dwHighDateTime=0x1d5eea3, ftLastAccessTime.dwLowDateTime=0x231292c0, ftLastAccessTime.dwHighDateTime=0x1d5efb0, ftLastWriteTime.dwLowDateTime=0x231292c0, ftLastWriteTime.dwHighDateTime=0x1d5efb0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581c2f0 [0131.233] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33078b30, ftCreationTime.dwHighDateTime=0x1d5eea3, ftLastAccessTime.dwLowDateTime=0x231292c0, ftLastAccessTime.dwHighDateTime=0x1d5efb0, ftLastWriteTime.dwLowDateTime=0x231292c0, ftLastWriteTime.dwHighDateTime=0x1d5efb0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.233] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6139ca0, ftCreationTime.dwHighDateTime=0x1d5e66d, ftLastAccessTime.dwLowDateTime=0x9b4ce620, ftLastAccessTime.dwHighDateTime=0x1d5eb8a, ftLastWriteTime.dwLowDateTime=0x9b4ce620, ftLastWriteTime.dwHighDateTime=0x1d5eb8a, nFileSizeHigh=0x0, nFileSizeLow=0x16c0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="gi-gn-ceSP.xlsx", cAlternateFileName="GI-GN-~1.XLS")) returned 1 [0131.233] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf165f60, ftCreationTime.dwHighDateTime=0x1d5e3ea, ftLastAccessTime.dwLowDateTime=0x68850540, ftLastAccessTime.dwHighDateTime=0x1d5ed12, ftLastWriteTime.dwLowDateTime=0x68850540, ftLastWriteTime.dwHighDateTime=0x1d5ed12, nFileSizeHigh=0x0, nFileSizeLow=0x12ad9, dwReserved0=0x0, dwReserved1=0x0, cFileName="itZvIe.rtf", cAlternateFileName="")) returned 1 [0131.233] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x476112f0, ftCreationTime.dwHighDateTime=0x1d5e7c7, ftLastAccessTime.dwLowDateTime=0x16e4ed10, ftLastAccessTime.dwHighDateTime=0x1d5e43c, ftLastWriteTime.dwLowDateTime=0x16e4ed10, ftLastWriteTime.dwHighDateTime=0x1d5e43c, nFileSizeHigh=0x0, nFileSizeLow=0x12e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="nar wE503o5iNw.pps", cAlternateFileName="NARWE5~1.PPS")) returned 1 [0131.233] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf149d00, ftCreationTime.dwHighDateTime=0x1d5e877, ftLastAccessTime.dwLowDateTime=0xe544540, ftLastAccessTime.dwHighDateTime=0x1d5e9d4, ftLastWriteTime.dwLowDateTime=0xe544540, ftLastWriteTime.dwHighDateTime=0x1d5e9d4, nFileSizeHigh=0x0, nFileSizeLow=0x4eef, dwReserved0=0x0, dwReserved1=0x0, cFileName="oqIOz6iz.doc", cAlternateFileName="")) returned 1 [0131.233] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f151640, ftCreationTime.dwHighDateTime=0x1d5e899, ftLastAccessTime.dwLowDateTime=0x37211630, ftLastAccessTime.dwHighDateTime=0x1d5ef13, ftLastWriteTime.dwLowDateTime=0x37211630, ftLastWriteTime.dwHighDateTime=0x1d5ef13, nFileSizeHigh=0x0, nFileSizeLow=0x10995, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSAY1cgEX.pdf", cAlternateFileName="PSAY1C~1.PDF")) returned 1 [0131.234] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfcd5b0, ftCreationTime.dwHighDateTime=0x1d5e2d2, ftLastAccessTime.dwLowDateTime=0xc92f31a0, ftLastAccessTime.dwHighDateTime=0x1d5e2bc, ftLastWriteTime.dwLowDateTime=0xc92f31a0, ftLastWriteTime.dwHighDateTime=0x1d5e2bc, nFileSizeHigh=0x0, nFileSizeLow=0x6442, dwReserved0=0x0, dwReserved1=0x0, cFileName="pwAyObt8RNfNX8YXKy4Y.pptx", cAlternateFileName="PWAYOB~1.PPT")) returned 1 [0131.234] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b3f72f0, ftCreationTime.dwHighDateTime=0x1d5ebc9, ftLastAccessTime.dwLowDateTime=0xddf7cc30, ftLastAccessTime.dwHighDateTime=0x1d5e462, ftLastWriteTime.dwLowDateTime=0xddf7cc30, ftLastWriteTime.dwHighDateTime=0x1d5e462, nFileSizeHigh=0x0, nFileSizeLow=0x205b, dwReserved0=0x0, dwReserved1=0x0, cFileName="umbEdP0Ss9TgE S.xls", cAlternateFileName="UMBEDP~1.XLS")) returned 1 [0131.234] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32a62350, ftCreationTime.dwHighDateTime=0x1d5ea5b, ftLastAccessTime.dwLowDateTime=0xaaf87f10, ftLastAccessTime.dwHighDateTime=0x1d5eab5, ftLastWriteTime.dwLowDateTime=0xaaf87f10, ftLastWriteTime.dwHighDateTime=0x1d5eab5, nFileSizeHigh=0x0, nFileSizeLow=0x14c72, dwReserved0=0x0, dwReserved1=0x0, cFileName="xBrD3v.ots", cAlternateFileName="")) returned 1 [0131.234] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4b7b60, ftCreationTime.dwHighDateTime=0x1d5eced, ftLastAccessTime.dwLowDateTime=0x25fbc080, ftLastAccessTime.dwHighDateTime=0x1d5e2ed, ftLastWriteTime.dwLowDateTime=0x25fbc080, ftLastWriteTime.dwHighDateTime=0x1d5e2ed, nFileSizeHigh=0x0, nFileSizeLow=0x8c21, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z37OH.xls", cAlternateFileName="")) returned 1 [0131.234] FindNextFileW (in: hFindFile=0x581c2f0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.234] FindClose (in: hFindFile=0x581c2f0 | out: hFindFile=0x581c2f0) returned 1 [0131.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0131.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0131.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc", lpFilePart=0x0) returned 0x3e [0131.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\oqioz6iz.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0131.239] GetFileType (hFile=0x78c) returned 0x1 [0131.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.240] GetFileType (hFile=0x78c) returned 0x1 [0131.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc.P4WN3D", lpFilePart=0x0) returned 0x45 [0131.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\oqioz6iz.doc.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0131.240] GetFileType (hFile=0x788) returned 0x1 [0131.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.241] GetFileType (hFile=0x788) returned 0x1 [0131.241] SetEndOfFile (hFile=0x788) returned 1 [0131.241] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x4eef [0131.241] ReadFile (in: hFile=0x78c, lpBuffer=0x2b4bfbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b4bfbc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.242] WriteFile (in: hFile=0x788, lpBuffer=0x2b4d40c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4d40c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.245] ReadFile (in: hFile=0x78c, lpBuffer=0x2b4bfbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b4bfbc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.245] WriteFile (in: hFile=0x788, lpBuffer=0x2b4e418*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4e418*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.245] ReadFile (in: hFile=0x78c, lpBuffer=0x2b4bfbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b4bfbc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.246] WriteFile (in: hFile=0x788, lpBuffer=0x2b4f424*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4f424*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.246] ReadFile (in: hFile=0x78c, lpBuffer=0x2b4bfbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b4bfbc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.246] WriteFile (in: hFile=0x788, lpBuffer=0x2b50430*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b50430*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.247] ReadFile (in: hFile=0x78c, lpBuffer=0x2b4bfbc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b4bfbc*, lpNumberOfBytesRead=0xb3f1fc*=0xeef, lpOverlapped=0x0) returned 1 [0131.247] WriteFile (in: hFile=0x788, lpBuffer=0x2b52328*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b52328*, lpNumberOfBytesWritten=0xb3f1b4*=0xef0, lpOverlapped=0x0) returned 1 [0131.248] CloseHandle (hObject=0x788) returned 1 [0131.253] CloseHandle (hObject=0x78c) returned 1 [0131.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc", lpFilePart=0x0) returned 0x3e [0131.256] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\oqIOz6iz.doc" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\oqioz6iz.doc")) returned 1 [0131.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf", lpFilePart=0x0) returned 0x3f [0131.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\psay1cgex.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0131.311] GetFileType (hFile=0x78c) returned 0x1 [0131.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.311] GetFileType (hFile=0x78c) returned 0x1 [0131.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf.P4WN3D", lpFilePart=0x0) returned 0x46 [0131.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\psay1cgex.pdf.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0131.311] GetFileType (hFile=0x788) returned 0x1 [0131.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.312] GetFileType (hFile=0x788) returned 0x1 [0131.312] SetEndOfFile (hFile=0x788) returned 1 [0131.312] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x10995 [0131.312] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.313] WriteFile (in: hFile=0x788, lpBuffer=0x2b55580*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b55580*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.315] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.315] WriteFile (in: hFile=0x788, lpBuffer=0x2b5658c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5658c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.315] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.316] WriteFile (in: hFile=0x788, lpBuffer=0x2b57598*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b57598*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.316] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.316] WriteFile (in: hFile=0x788, lpBuffer=0x2b585a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b585a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.317] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.317] WriteFile (in: hFile=0x788, lpBuffer=0x2b595b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b595b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.317] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.318] WriteFile (in: hFile=0x788, lpBuffer=0x2b5a5bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5a5bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.318] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.318] WriteFile (in: hFile=0x788, lpBuffer=0x2b5b5c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5b5c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.319] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.319] WriteFile (in: hFile=0x788, lpBuffer=0x2b5c5d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5c5d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.319] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.320] WriteFile (in: hFile=0x788, lpBuffer=0x2b5d5e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5d5e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.320] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.320] WriteFile (in: hFile=0x788, lpBuffer=0x2b5e5ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5e5ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.320] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.321] WriteFile (in: hFile=0x788, lpBuffer=0x2b5f5f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5f5f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.321] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.322] WriteFile (in: hFile=0x788, lpBuffer=0x2b60604*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b60604*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.322] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.322] WriteFile (in: hFile=0x788, lpBuffer=0x2b61610*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b61610*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.322] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.323] WriteFile (in: hFile=0x788, lpBuffer=0x2b6261c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6261c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.323] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.323] WriteFile (in: hFile=0x788, lpBuffer=0x2b63628*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b63628*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.323] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.324] WriteFile (in: hFile=0x788, lpBuffer=0x2b64634*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b64634*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.324] ReadFile (in: hFile=0x78c, lpBuffer=0x2b54130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b54130*, lpNumberOfBytesRead=0xb3f1fc*=0x995, lpOverlapped=0x0) returned 1 [0131.324] WriteFile (in: hFile=0x788, lpBuffer=0x2b65fdc*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b65fdc*, lpNumberOfBytesWritten=0xb3f1b4*=0x9a0, lpOverlapped=0x0) returned 1 [0131.325] CloseHandle (hObject=0x788) returned 1 [0131.329] CloseHandle (hObject=0x78c) returned 1 [0131.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf", lpFilePart=0x0) returned 0x3f [0131.331] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\PSAY1cgEX.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\psay1cgex.pdf")) returned 1 [0131.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx", lpFilePart=0x0) returned 0x4b [0131.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.390] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\pwayobt8rnfnx8yxky4y.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0131.390] GetFileType (hFile=0x78c) returned 0x1 [0131.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.390] GetFileType (hFile=0x78c) returned 0x1 [0131.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx.P4WN3D", lpFilePart=0x0) returned 0x52 [0131.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.390] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\pwayobt8rnfnx8yxky4y.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0131.391] GetFileType (hFile=0x788) returned 0x1 [0131.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.391] GetFileType (hFile=0x788) returned 0x1 [0131.391] SetEndOfFile (hFile=0x788) returned 1 [0131.391] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x6442 [0131.392] ReadFile (in: hFile=0x78c, lpBuffer=0x2b67e64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b67e64*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.393] WriteFile (in: hFile=0x788, lpBuffer=0x2b692b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b692b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.394] ReadFile (in: hFile=0x78c, lpBuffer=0x2b67e64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b67e64*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.395] WriteFile (in: hFile=0x788, lpBuffer=0x2b6a2c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6a2c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.395] ReadFile (in: hFile=0x78c, lpBuffer=0x2b67e64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b67e64*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.395] WriteFile (in: hFile=0x788, lpBuffer=0x2b6b2cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6b2cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.395] ReadFile (in: hFile=0x78c, lpBuffer=0x2b67e64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b67e64*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.396] WriteFile (in: hFile=0x788, lpBuffer=0x2b6c2d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6c2d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.396] ReadFile (in: hFile=0x78c, lpBuffer=0x2b67e64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b67e64*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.396] WriteFile (in: hFile=0x788, lpBuffer=0x2b6d2e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6d2e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.396] ReadFile (in: hFile=0x78c, lpBuffer=0x2b67e64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b67e64*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.397] WriteFile (in: hFile=0x788, lpBuffer=0x2b6e2f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6e2f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.397] ReadFile (in: hFile=0x78c, lpBuffer=0x2b67e64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b67e64*, lpNumberOfBytesRead=0xb3f1fc*=0x442, lpOverlapped=0x0) returned 1 [0131.397] WriteFile (in: hFile=0x788, lpBuffer=0x2b6f748*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b6f748*, lpNumberOfBytesWritten=0xb3f1b4*=0x450, lpOverlapped=0x0) returned 1 [0131.397] CloseHandle (hObject=0x788) returned 1 [0131.447] CloseHandle (hObject=0x78c) returned 1 [0131.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx", lpFilePart=0x0) returned 0x4b [0131.449] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\pwAyObt8RNfNX8YXKy4Y.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\pwayobt8rnfnx8yxky4y.pptx")) returned 1 [0131.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls", lpFilePart=0x0) returned 0x45 [0131.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.498] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\umbedp0ss9tge s.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0131.498] GetFileType (hFile=0x78c) returned 0x1 [0131.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.498] GetFileType (hFile=0x78c) returned 0x1 [0131.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls.P4WN3D", lpFilePart=0x0) returned 0x4c [0131.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.498] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\umbedp0ss9tge s.xls.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0131.499] GetFileType (hFile=0x788) returned 0x1 [0131.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.499] GetFileType (hFile=0x788) returned 0x1 [0131.499] SetEndOfFile (hFile=0x788) returned 1 [0131.499] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x205b [0131.500] ReadFile (in: hFile=0x78c, lpBuffer=0x2b715c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b715c8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.501] WriteFile (in: hFile=0x788, lpBuffer=0x2b72a18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b72a18*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.502] ReadFile (in: hFile=0x78c, lpBuffer=0x2b715c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b715c8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.503] WriteFile (in: hFile=0x788, lpBuffer=0x2b73a24*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b73a24*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.503] ReadFile (in: hFile=0x78c, lpBuffer=0x2b715c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b715c8*, lpNumberOfBytesRead=0xb3f1fc*=0x5b, lpOverlapped=0x0) returned 1 [0131.503] WriteFile (in: hFile=0x788, lpBuffer=0x2b74a8c*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b74a8c*, lpNumberOfBytesWritten=0xb3f1b4*=0x60, lpOverlapped=0x0) returned 1 [0131.504] CloseHandle (hObject=0x788) returned 1 [0131.505] CloseHandle (hObject=0x78c) returned 1 [0131.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls", lpFilePart=0x0) returned 0x45 [0131.507] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\umbEdP0Ss9TgE S.xls" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\umbedp0ss9tge s.xls")) returned 1 [0131.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls", lpFilePart=0x0) returned 0x3b [0131.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\z37oh.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0131.643] GetFileType (hFile=0x78c) returned 0x1 [0131.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.643] GetFileType (hFile=0x78c) returned 0x1 [0131.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls.P4WN3D", lpFilePart=0x0) returned 0x42 [0131.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\z37oh.xls.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0131.644] GetFileType (hFile=0x788) returned 0x1 [0131.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.644] GetFileType (hFile=0x788) returned 0x1 [0131.644] SetEndOfFile (hFile=0x788) returned 1 [0131.644] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x8c21 [0131.645] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.646] WriteFile (in: hFile=0x788, lpBuffer=0x2b77cd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b77cd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.647] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.648] WriteFile (in: hFile=0x788, lpBuffer=0x2b78ce4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b78ce4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.648] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.648] WriteFile (in: hFile=0x788, lpBuffer=0x2b79cf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b79cf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.649] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.649] WriteFile (in: hFile=0x788, lpBuffer=0x2b7acfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7acfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.649] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.706] WriteFile (in: hFile=0x788, lpBuffer=0x2b7bd08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7bd08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.706] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.707] WriteFile (in: hFile=0x788, lpBuffer=0x2b7cd14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7cd14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.707] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.707] WriteFile (in: hFile=0x788, lpBuffer=0x2b7dd20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7dd20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.707] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.708] WriteFile (in: hFile=0x788, lpBuffer=0x2b7ed2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7ed2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.708] ReadFile (in: hFile=0x78c, lpBuffer=0x2b76888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b76888*, lpNumberOfBytesRead=0xb3f1fc*=0xc21, lpOverlapped=0x0) returned 1 [0131.708] WriteFile (in: hFile=0x788, lpBuffer=0x2b80964*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b80964*, lpNumberOfBytesWritten=0xb3f1b4*=0xc30, lpOverlapped=0x0) returned 1 [0131.708] CloseHandle (hObject=0x788) returned 1 [0131.710] CloseHandle (hObject=0x78c) returned 1 [0131.712] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls", lpFilePart=0x0) returned 0x3b [0131.712] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\qoNQhW\\Z37OH.xls" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\qonqhw\\z37oh.xls")) returned 1 [0131.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0131.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-", lpFilePart=0x0) returned 0x39 [0131.763] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a1d5910, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xb95d8d10, ftLastAccessTime.dwHighDateTime=0x1d5e755, ftLastWriteTime.dwLowDateTime=0xb95d8d10, ftLastWriteTime.dwHighDateTime=0x1d5e755, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581c7b0 [0131.764] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a1d5910, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xb95d8d10, ftLastAccessTime.dwHighDateTime=0x1d5e755, ftLastWriteTime.dwLowDateTime=0xb95d8d10, ftLastWriteTime.dwHighDateTime=0x1d5e755, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.764] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4332e0, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0xa30bc810, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0xa30bc810, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1ripCiHS8", cAlternateFileName="1RIPCI~1")) returned 1 [0131.764] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f19840, ftCreationTime.dwHighDateTime=0x1d5e955, ftLastAccessTime.dwLowDateTime=0xe0e472f0, ftLastAccessTime.dwHighDateTime=0x1d5e993, ftLastWriteTime.dwLowDateTime=0xe0e472f0, ftLastWriteTime.dwHighDateTime=0x1d5e993, nFileSizeHigh=0x0, nFileSizeLow=0x248a, dwReserved0=0x0, dwReserved1=0x0, cFileName="25EMcWwV1uO_aopY_.ots", cAlternateFileName="25EMCW~1.OTS")) returned 1 [0131.764] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dc3d90, ftCreationTime.dwHighDateTime=0x1d5f0e6, ftLastAccessTime.dwLowDateTime=0x5258790, ftLastAccessTime.dwHighDateTime=0x1d5e259, ftLastWriteTime.dwLowDateTime=0x5258790, ftLastWriteTime.dwHighDateTime=0x1d5e259, nFileSizeHigh=0x0, nFileSizeLow=0xf6be, dwReserved0=0x0, dwReserved1=0x0, cFileName="56hAYGiaMfkI.csv", cAlternateFileName="56HAYG~1.CSV")) returned 1 [0131.765] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cecf70, ftCreationTime.dwHighDateTime=0x1d5f020, ftLastAccessTime.dwLowDateTime=0xb80ecc60, ftLastAccessTime.dwHighDateTime=0x1d5edec, ftLastWriteTime.dwLowDateTime=0xb80ecc60, ftLastWriteTime.dwHighDateTime=0x1d5edec, nFileSizeHigh=0x0, nFileSizeLow=0x12751, dwReserved0=0x0, dwReserved1=0x0, cFileName="7i3o2-kfBOXqx54cu6.docx", cAlternateFileName="7I3O2-~1.DOC")) returned 1 [0131.765] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58bc5c0, ftCreationTime.dwHighDateTime=0x1d5e80b, ftLastAccessTime.dwLowDateTime=0x482e8c60, ftLastAccessTime.dwHighDateTime=0x1d5ea49, ftLastWriteTime.dwLowDateTime=0x482e8c60, ftLastWriteTime.dwHighDateTime=0x1d5ea49, nFileSizeHigh=0x0, nFileSizeLow=0x2afd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FabaBlRQZCjZVZLt12LF.doc", cAlternateFileName="FABABL~1.DOC")) returned 1 [0131.765] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a18ea50, ftCreationTime.dwHighDateTime=0x1d5e818, ftLastAccessTime.dwLowDateTime=0x99412e00, ftLastAccessTime.dwHighDateTime=0x1d5e4ef, ftLastWriteTime.dwLowDateTime=0x99412e00, ftLastWriteTime.dwHighDateTime=0x1d5e4ef, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoR0Pw5Msg0LhhmgJ-7s.ods", cAlternateFileName="GOR0PW~1.ODS")) returned 1 [0131.765] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bdee300, ftCreationTime.dwHighDateTime=0x1d5e170, ftLastAccessTime.dwLowDateTime=0x7a77f010, ftLastAccessTime.dwHighDateTime=0x1d5e861, ftLastWriteTime.dwLowDateTime=0x7a77f010, ftLastWriteTime.dwHighDateTime=0x1d5e861, nFileSizeHigh=0x0, nFileSizeLow=0xf10, dwReserved0=0x0, dwReserved1=0x0, cFileName="jVr-gSGegrWM6oN8.ots", cAlternateFileName="JVR-GS~1.OTS")) returned 1 [0131.765] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1913990, ftCreationTime.dwHighDateTime=0x1d5ea70, ftLastAccessTime.dwLowDateTime=0xc5f7dd30, ftLastAccessTime.dwHighDateTime=0x1d5e234, ftLastWriteTime.dwLowDateTime=0xc5f7dd30, ftLastWriteTime.dwHighDateTime=0x1d5e234, nFileSizeHigh=0x0, nFileSizeLow=0x1ecb, dwReserved0=0x0, dwReserved1=0x0, cFileName="k8RX28Lr.odp", cAlternateFileName="")) returned 1 [0131.766] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0b3cc0, ftCreationTime.dwHighDateTime=0x1d5eb2e, ftLastAccessTime.dwLowDateTime=0xecfd33e0, ftLastAccessTime.dwHighDateTime=0x1d5ed6e, ftLastWriteTime.dwLowDateTime=0xecfd33e0, ftLastWriteTime.dwHighDateTime=0x1d5ed6e, nFileSizeHigh=0x0, nFileSizeLow=0xff18, dwReserved0=0x0, dwReserved1=0x0, cFileName="tJEck5lixY8n3t9o.docx", cAlternateFileName="TJECK5~1.DOC")) returned 1 [0131.766] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8172ab0, ftCreationTime.dwHighDateTime=0x1d5e863, ftLastAccessTime.dwLowDateTime=0xe96bbdb0, ftLastAccessTime.dwHighDateTime=0x1d5eef8, ftLastWriteTime.dwLowDateTime=0xe96bbdb0, ftLastWriteTime.dwHighDateTime=0x1d5eef8, nFileSizeHigh=0x0, nFileSizeLow=0xd9f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZtm2p_Dip.rtf", cAlternateFileName="TZTM2P~1.RTF")) returned 1 [0131.766] FindNextFileW (in: hFindFile=0x581c7b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8172ab0, ftCreationTime.dwHighDateTime=0x1d5e863, ftLastAccessTime.dwLowDateTime=0xe96bbdb0, ftLastAccessTime.dwHighDateTime=0x1d5eef8, ftLastWriteTime.dwLowDateTime=0xe96bbdb0, ftLastWriteTime.dwHighDateTime=0x1d5eef8, nFileSizeHigh=0x0, nFileSizeLow=0xd9f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZtm2p_Dip.rtf", cAlternateFileName="TZTM2P~1.RTF")) returned 0 [0131.766] FindClose (in: hFindFile=0x581c7b0 | out: hFindFile=0x581c7b0) returned 1 [0131.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0131.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0131.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0131.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-", lpFilePart=0x0) returned 0x39 [0131.767] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a1d5910, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xb95d8d10, ftLastAccessTime.dwHighDateTime=0x1d5e755, ftLastWriteTime.dwLowDateTime=0xb95d8d10, ftLastWriteTime.dwHighDateTime=0x1d5e755, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581c8b0 [0131.767] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a1d5910, ftCreationTime.dwHighDateTime=0x1d5e655, ftLastAccessTime.dwLowDateTime=0xb95d8d10, ftLastAccessTime.dwHighDateTime=0x1d5e755, ftLastWriteTime.dwLowDateTime=0xb95d8d10, ftLastWriteTime.dwHighDateTime=0x1d5e755, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.768] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4332e0, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0xa30bc810, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0xa30bc810, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1ripCiHS8", cAlternateFileName="1RIPCI~1")) returned 1 [0131.768] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f19840, ftCreationTime.dwHighDateTime=0x1d5e955, ftLastAccessTime.dwLowDateTime=0xe0e472f0, ftLastAccessTime.dwHighDateTime=0x1d5e993, ftLastWriteTime.dwLowDateTime=0xe0e472f0, ftLastWriteTime.dwHighDateTime=0x1d5e993, nFileSizeHigh=0x0, nFileSizeLow=0x248a, dwReserved0=0x0, dwReserved1=0x0, cFileName="25EMcWwV1uO_aopY_.ots", cAlternateFileName="25EMCW~1.OTS")) returned 1 [0131.768] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4dc3d90, ftCreationTime.dwHighDateTime=0x1d5f0e6, ftLastAccessTime.dwLowDateTime=0x5258790, ftLastAccessTime.dwHighDateTime=0x1d5e259, ftLastWriteTime.dwLowDateTime=0x5258790, ftLastWriteTime.dwHighDateTime=0x1d5e259, nFileSizeHigh=0x0, nFileSizeLow=0xf6be, dwReserved0=0x0, dwReserved1=0x0, cFileName="56hAYGiaMfkI.csv", cAlternateFileName="56HAYG~1.CSV")) returned 1 [0131.768] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cecf70, ftCreationTime.dwHighDateTime=0x1d5f020, ftLastAccessTime.dwLowDateTime=0xb80ecc60, ftLastAccessTime.dwHighDateTime=0x1d5edec, ftLastWriteTime.dwLowDateTime=0xb80ecc60, ftLastWriteTime.dwHighDateTime=0x1d5edec, nFileSizeHigh=0x0, nFileSizeLow=0x12751, dwReserved0=0x0, dwReserved1=0x0, cFileName="7i3o2-kfBOXqx54cu6.docx", cAlternateFileName="7I3O2-~1.DOC")) returned 1 [0131.768] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf58bc5c0, ftCreationTime.dwHighDateTime=0x1d5e80b, ftLastAccessTime.dwLowDateTime=0x482e8c60, ftLastAccessTime.dwHighDateTime=0x1d5ea49, ftLastWriteTime.dwLowDateTime=0x482e8c60, ftLastWriteTime.dwHighDateTime=0x1d5ea49, nFileSizeHigh=0x0, nFileSizeLow=0x2afd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FabaBlRQZCjZVZLt12LF.doc", cAlternateFileName="FABABL~1.DOC")) returned 1 [0131.769] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a18ea50, ftCreationTime.dwHighDateTime=0x1d5e818, ftLastAccessTime.dwLowDateTime=0x99412e00, ftLastAccessTime.dwHighDateTime=0x1d5e4ef, ftLastWriteTime.dwLowDateTime=0x99412e00, ftLastWriteTime.dwHighDateTime=0x1d5e4ef, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoR0Pw5Msg0LhhmgJ-7s.ods", cAlternateFileName="GOR0PW~1.ODS")) returned 1 [0131.769] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bdee300, ftCreationTime.dwHighDateTime=0x1d5e170, ftLastAccessTime.dwLowDateTime=0x7a77f010, ftLastAccessTime.dwHighDateTime=0x1d5e861, ftLastWriteTime.dwLowDateTime=0x7a77f010, ftLastWriteTime.dwHighDateTime=0x1d5e861, nFileSizeHigh=0x0, nFileSizeLow=0xf10, dwReserved0=0x0, dwReserved1=0x0, cFileName="jVr-gSGegrWM6oN8.ots", cAlternateFileName="JVR-GS~1.OTS")) returned 1 [0131.769] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1913990, ftCreationTime.dwHighDateTime=0x1d5ea70, ftLastAccessTime.dwLowDateTime=0xc5f7dd30, ftLastAccessTime.dwHighDateTime=0x1d5e234, ftLastWriteTime.dwLowDateTime=0xc5f7dd30, ftLastWriteTime.dwHighDateTime=0x1d5e234, nFileSizeHigh=0x0, nFileSizeLow=0x1ecb, dwReserved0=0x0, dwReserved1=0x0, cFileName="k8RX28Lr.odp", cAlternateFileName="")) returned 1 [0131.769] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0b3cc0, ftCreationTime.dwHighDateTime=0x1d5eb2e, ftLastAccessTime.dwLowDateTime=0xecfd33e0, ftLastAccessTime.dwHighDateTime=0x1d5ed6e, ftLastWriteTime.dwLowDateTime=0xecfd33e0, ftLastWriteTime.dwHighDateTime=0x1d5ed6e, nFileSizeHigh=0x0, nFileSizeLow=0xff18, dwReserved0=0x0, dwReserved1=0x0, cFileName="tJEck5lixY8n3t9o.docx", cAlternateFileName="TJECK5~1.DOC")) returned 1 [0131.769] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8172ab0, ftCreationTime.dwHighDateTime=0x1d5e863, ftLastAccessTime.dwLowDateTime=0xe96bbdb0, ftLastAccessTime.dwHighDateTime=0x1d5eef8, ftLastWriteTime.dwLowDateTime=0xe96bbdb0, ftLastWriteTime.dwHighDateTime=0x1d5eef8, nFileSizeHigh=0x0, nFileSizeLow=0xd9f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="tZtm2p_Dip.rtf", cAlternateFileName="TZTM2P~1.RTF")) returned 1 [0131.769] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.770] FindClose (in: hFindFile=0x581c8b0 | out: hFindFile=0x581c8b0) returned 1 [0131.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0131.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0131.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx", lpFilePart=0x0) returned 0x51 [0131.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.774] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\7i3o2-kfboxqx54cu6.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0131.775] GetFileType (hFile=0x78c) returned 0x1 [0131.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.775] GetFileType (hFile=0x78c) returned 0x1 [0131.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx.P4WN3D", lpFilePart=0x0) returned 0x58 [0131.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.775] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\7i3o2-kfboxqx54cu6.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0131.775] GetFileType (hFile=0x788) returned 0x1 [0131.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.776] GetFileType (hFile=0x788) returned 0x1 [0131.776] SetEndOfFile (hFile=0x788) returned 1 [0131.776] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x12751 [0131.776] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.777] WriteFile (in: hFile=0x788, lpBuffer=0x2b87a10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b87a10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.779] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.779] WriteFile (in: hFile=0x788, lpBuffer=0x2b88a1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b88a1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.779] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.780] WriteFile (in: hFile=0x788, lpBuffer=0x2b89a28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b89a28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.780] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.780] WriteFile (in: hFile=0x788, lpBuffer=0x2b8aa34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8aa34*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.780] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.781] WriteFile (in: hFile=0x788, lpBuffer=0x2b8ba40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8ba40*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.781] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.781] WriteFile (in: hFile=0x788, lpBuffer=0x2b8ca4c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8ca4c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.782] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.782] WriteFile (in: hFile=0x788, lpBuffer=0x2b8da58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8da58*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.782] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.782] WriteFile (in: hFile=0x788, lpBuffer=0x2b8ea64*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8ea64*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.783] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.783] WriteFile (in: hFile=0x788, lpBuffer=0x2b8fa70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8fa70*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.783] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.784] WriteFile (in: hFile=0x788, lpBuffer=0x2b90a7c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b90a7c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.784] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.784] WriteFile (in: hFile=0x788, lpBuffer=0x2b91a88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b91a88*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.784] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.785] WriteFile (in: hFile=0x788, lpBuffer=0x2b92a94*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b92a94*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.785] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.785] WriteFile (in: hFile=0x788, lpBuffer=0x2b93aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b93aa0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.785] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.786] WriteFile (in: hFile=0x788, lpBuffer=0x2b94aac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b94aac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.786] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.786] WriteFile (in: hFile=0x788, lpBuffer=0x2b95ab8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b95ab8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.786] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.787] WriteFile (in: hFile=0x788, lpBuffer=0x2b96ac4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b96ac4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.787] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.787] WriteFile (in: hFile=0x788, lpBuffer=0x2b97ad0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b97ad0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.788] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.788] WriteFile (in: hFile=0x788, lpBuffer=0x2b98adc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b98adc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.788] ReadFile (in: hFile=0x78c, lpBuffer=0x2b865c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b865c0*, lpNumberOfBytesRead=0xb3f1fc*=0x751, lpOverlapped=0x0) returned 1 [0131.788] WriteFile (in: hFile=0x788, lpBuffer=0x2b9a244*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b9a244*, lpNumberOfBytesWritten=0xb3f1b4*=0x760, lpOverlapped=0x0) returned 1 [0131.789] CloseHandle (hObject=0x788) returned 1 [0131.843] CloseHandle (hObject=0x78c) returned 1 [0131.845] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx", lpFilePart=0x0) returned 0x51 [0131.845] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\7i3o2-kfBOXqx54cu6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\7i3o2-kfboxqx54cu6.docx")) returned 1 [0131.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc", lpFilePart=0x0) returned 0x52 [0131.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\fabablrqzcjzvzlt12lf.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0131.905] GetFileType (hFile=0x78c) returned 0x1 [0131.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.906] GetFileType (hFile=0x78c) returned 0x1 [0131.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc.P4WN3D", lpFilePart=0x0) returned 0x59 [0131.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\fabablrqzcjzvzlt12lf.doc.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0131.906] GetFileType (hFile=0x788) returned 0x1 [0131.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.907] GetFileType (hFile=0x788) returned 0x1 [0131.907] SetEndOfFile (hFile=0x788) returned 1 [0131.907] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x2afd [0131.907] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9c12c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9c12c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.908] WriteFile (in: hFile=0x788, lpBuffer=0x2b9d57c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9d57c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.909] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9c12c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9c12c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.909] WriteFile (in: hFile=0x788, lpBuffer=0x2b9e588*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9e588*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.910] ReadFile (in: hFile=0x78c, lpBuffer=0x2b9c12c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b9c12c*, lpNumberOfBytesRead=0xb3f1fc*=0xafd, lpOverlapped=0x0) returned 1 [0131.910] WriteFile (in: hFile=0x788, lpBuffer=0x2ba0090*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ba0090*, lpNumberOfBytesWritten=0xb3f1b4*=0xb00, lpOverlapped=0x0) returned 1 [0131.910] CloseHandle (hObject=0x788) returned 1 [0131.911] CloseHandle (hObject=0x78c) returned 1 [0131.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc", lpFilePart=0x0) returned 0x52 [0131.913] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\FabaBlRQZCjZVZLt12LF.doc" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\fabablrqzcjzvzlt12lf.doc")) returned 1 [0131.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx", lpFilePart=0x0) returned 0x4f [0131.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\tjeck5lixy8n3t9o.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0131.970] GetFileType (hFile=0x78c) returned 0x1 [0131.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.970] GetFileType (hFile=0x78c) returned 0x1 [0131.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx.P4WN3D", lpFilePart=0x0) returned 0x56 [0131.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0131.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\tjeck5lixy8n3t9o.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0131.971] GetFileType (hFile=0x788) returned 0x1 [0131.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0131.971] GetFileType (hFile=0x788) returned 0x1 [0131.971] SetEndOfFile (hFile=0x788) returned 1 [0131.971] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xff18 [0131.971] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.972] WriteFile (in: hFile=0x788, lpBuffer=0x2ba33a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba33a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.973] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.974] WriteFile (in: hFile=0x788, lpBuffer=0x2ba43b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba43b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.974] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.974] WriteFile (in: hFile=0x788, lpBuffer=0x2ba53c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba53c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.974] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.975] WriteFile (in: hFile=0x788, lpBuffer=0x2ba63cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba63cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.975] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.975] WriteFile (in: hFile=0x788, lpBuffer=0x2ba73d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba73d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.976] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.976] WriteFile (in: hFile=0x788, lpBuffer=0x2ba83e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba83e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.976] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.977] WriteFile (in: hFile=0x788, lpBuffer=0x2ba93f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba93f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.977] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0131.977] WriteFile (in: hFile=0x788, lpBuffer=0x2baa3fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2baa3fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0131.977] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.044] WriteFile (in: hFile=0x788, lpBuffer=0x2bab408*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bab408*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.045] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.045] WriteFile (in: hFile=0x788, lpBuffer=0x2bac414*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bac414*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.045] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.045] WriteFile (in: hFile=0x788, lpBuffer=0x2bad420*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bad420*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.046] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.046] WriteFile (in: hFile=0x788, lpBuffer=0x2bae42c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bae42c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.046] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.046] WriteFile (in: hFile=0x788, lpBuffer=0x2baf438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2baf438*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.046] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.046] WriteFile (in: hFile=0x788, lpBuffer=0x2bb0444*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb0444*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.047] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.047] WriteFile (in: hFile=0x788, lpBuffer=0x2bb1450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb1450*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.047] ReadFile (in: hFile=0x78c, lpBuffer=0x2ba1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ba1f58*, lpNumberOfBytesRead=0xb3f1fc*=0xf18, lpOverlapped=0x0) returned 1 [0132.047] WriteFile (in: hFile=0x788, lpBuffer=0x2bb3378*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bb3378*, lpNumberOfBytesWritten=0xb3f1b4*=0xf20, lpOverlapped=0x0) returned 1 [0132.048] CloseHandle (hObject=0x788) returned 1 [0132.050] CloseHandle (hObject=0x78c) returned 1 [0132.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx", lpFilePart=0x0) returned 0x4f [0132.052] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\tJEck5lixY8n3t9o.docx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\tjeck5lixy8n3t9o.docx")) returned 1 [0132.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0132.105] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8", lpFilePart=0x0) returned 0x43 [0132.106] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4332e0, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0xa30bc810, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0xa30bc810, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581c8b0 [0132.106] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4332e0, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0xa30bc810, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0xa30bc810, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.106] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9fab180, ftCreationTime.dwHighDateTime=0x1d5ee9b, ftLastAccessTime.dwLowDateTime=0x6b39d060, ftLastAccessTime.dwHighDateTime=0x1d5e590, ftLastWriteTime.dwLowDateTime=0x6b39d060, ftLastWriteTime.dwHighDateTime=0x1d5e590, nFileSizeHigh=0x0, nFileSizeLow=0xa9c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="K5Tya1.pptx", cAlternateFileName="K5TYA1~1.PPT")) returned 1 [0132.106] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc0d040, ftCreationTime.dwHighDateTime=0x1d5ef2f, ftLastAccessTime.dwLowDateTime=0x47598640, ftLastAccessTime.dwHighDateTime=0x1d5eb53, ftLastWriteTime.dwLowDateTime=0x47598640, ftLastWriteTime.dwHighDateTime=0x1d5eb53, nFileSizeHigh=0x0, nFileSizeLow=0xf69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RWOs95.ppt", cAlternateFileName="")) returned 1 [0132.106] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb75c2e0, ftCreationTime.dwHighDateTime=0x1d5e579, ftLastAccessTime.dwLowDateTime=0x41d986b0, ftLastAccessTime.dwHighDateTime=0x1d5e820, ftLastWriteTime.dwLowDateTime=0x41d986b0, ftLastWriteTime.dwHighDateTime=0x1d5e820, nFileSizeHigh=0x0, nFileSizeLow=0x16d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="wEKSTaeByKw.doc", cAlternateFileName="WEKSTA~1.DOC")) returned 1 [0132.107] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229fd800, ftCreationTime.dwHighDateTime=0x1d5e792, ftLastAccessTime.dwLowDateTime=0x83328a80, ftLastAccessTime.dwHighDateTime=0x1d5e75d, ftLastWriteTime.dwLowDateTime=0x83328a80, ftLastWriteTime.dwHighDateTime=0x1d5e75d, nFileSizeHigh=0x0, nFileSizeLow=0xd129, dwReserved0=0x0, dwReserved1=0x0, cFileName="xdIygsisqd2tWd.ots", cAlternateFileName="XDIYGS~1.OTS")) returned 1 [0132.107] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf94b88b0, ftCreationTime.dwHighDateTime=0x1d5ef65, ftLastAccessTime.dwLowDateTime=0x8d9283b0, ftLastAccessTime.dwHighDateTime=0x1d5e33c, ftLastWriteTime.dwLowDateTime=0x8d9283b0, ftLastWriteTime.dwHighDateTime=0x1d5e33c, nFileSizeHigh=0x0, nFileSizeLow=0x17e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xn2srH K_PZL4_UAhpr.pps", cAlternateFileName="XN2SRH~1.PPS")) returned 1 [0132.107] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f153510, ftCreationTime.dwHighDateTime=0x1d5ee72, ftLastAccessTime.dwLowDateTime=0x52644b0, ftLastAccessTime.dwHighDateTime=0x1d5e4e7, ftLastWriteTime.dwLowDateTime=0x52644b0, ftLastWriteTime.dwHighDateTime=0x1d5e4e7, nFileSizeHigh=0x0, nFileSizeLow=0x117c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zI o56T3ghe1br2qm.docx", cAlternateFileName="ZIO56T~1.DOC")) returned 1 [0132.107] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529717f0, ftCreationTime.dwHighDateTime=0x1d5e4f2, ftLastAccessTime.dwLowDateTime=0x7980a820, ftLastAccessTime.dwHighDateTime=0x1d5e319, ftLastWriteTime.dwLowDateTime=0x7980a820, ftLastWriteTime.dwHighDateTime=0x1d5e319, nFileSizeHigh=0x0, nFileSizeLow=0x148d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="zQrp.pptx", cAlternateFileName="ZQRP~1.PPT")) returned 1 [0132.107] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6dda0, ftCreationTime.dwHighDateTime=0x1d5e5cb, ftLastAccessTime.dwLowDateTime=0xbbf99b80, ftLastAccessTime.dwHighDateTime=0x1d5f0a7, ftLastWriteTime.dwLowDateTime=0xbbf99b80, ftLastWriteTime.dwHighDateTime=0x1d5f0a7, nFileSizeHigh=0x0, nFileSizeLow=0x65e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_oQnSmiqmv.ots", cAlternateFileName="_OQNSM~1.OTS")) returned 1 [0132.108] FindNextFileW (in: hFindFile=0x581c8b0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6dda0, ftCreationTime.dwHighDateTime=0x1d5e5cb, ftLastAccessTime.dwLowDateTime=0xbbf99b80, ftLastAccessTime.dwHighDateTime=0x1d5f0a7, ftLastWriteTime.dwLowDateTime=0xbbf99b80, ftLastWriteTime.dwHighDateTime=0x1d5f0a7, nFileSizeHigh=0x0, nFileSizeLow=0x65e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_oQnSmiqmv.ots", cAlternateFileName="_OQNSM~1.OTS")) returned 0 [0132.108] FindClose (in: hFindFile=0x581c8b0 | out: hFindFile=0x581c8b0) returned 1 [0132.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0132.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0132.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0132.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8", lpFilePart=0x0) returned 0x43 [0132.108] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4332e0, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0xa30bc810, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0xa30bc810, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581c330 [0132.108] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd4332e0, ftCreationTime.dwHighDateTime=0x1d5e558, ftLastAccessTime.dwLowDateTime=0xa30bc810, ftLastAccessTime.dwHighDateTime=0x1d5e73c, ftLastWriteTime.dwLowDateTime=0xa30bc810, ftLastWriteTime.dwHighDateTime=0x1d5e73c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.110] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9fab180, ftCreationTime.dwHighDateTime=0x1d5ee9b, ftLastAccessTime.dwLowDateTime=0x6b39d060, ftLastAccessTime.dwHighDateTime=0x1d5e590, ftLastWriteTime.dwLowDateTime=0x6b39d060, ftLastWriteTime.dwHighDateTime=0x1d5e590, nFileSizeHigh=0x0, nFileSizeLow=0xa9c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="K5Tya1.pptx", cAlternateFileName="K5TYA1~1.PPT")) returned 1 [0132.110] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xddc0d040, ftCreationTime.dwHighDateTime=0x1d5ef2f, ftLastAccessTime.dwLowDateTime=0x47598640, ftLastAccessTime.dwHighDateTime=0x1d5eb53, ftLastWriteTime.dwLowDateTime=0x47598640, ftLastWriteTime.dwHighDateTime=0x1d5eb53, nFileSizeHigh=0x0, nFileSizeLow=0xf69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RWOs95.ppt", cAlternateFileName="")) returned 1 [0132.110] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb75c2e0, ftCreationTime.dwHighDateTime=0x1d5e579, ftLastAccessTime.dwLowDateTime=0x41d986b0, ftLastAccessTime.dwHighDateTime=0x1d5e820, ftLastWriteTime.dwLowDateTime=0x41d986b0, ftLastWriteTime.dwHighDateTime=0x1d5e820, nFileSizeHigh=0x0, nFileSizeLow=0x16d70, dwReserved0=0x0, dwReserved1=0x0, cFileName="wEKSTaeByKw.doc", cAlternateFileName="WEKSTA~1.DOC")) returned 1 [0132.110] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229fd800, ftCreationTime.dwHighDateTime=0x1d5e792, ftLastAccessTime.dwLowDateTime=0x83328a80, ftLastAccessTime.dwHighDateTime=0x1d5e75d, ftLastWriteTime.dwLowDateTime=0x83328a80, ftLastWriteTime.dwHighDateTime=0x1d5e75d, nFileSizeHigh=0x0, nFileSizeLow=0xd129, dwReserved0=0x0, dwReserved1=0x0, cFileName="xdIygsisqd2tWd.ots", cAlternateFileName="XDIYGS~1.OTS")) returned 1 [0132.110] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf94b88b0, ftCreationTime.dwHighDateTime=0x1d5ef65, ftLastAccessTime.dwLowDateTime=0x8d9283b0, ftLastAccessTime.dwHighDateTime=0x1d5e33c, ftLastWriteTime.dwLowDateTime=0x8d9283b0, ftLastWriteTime.dwHighDateTime=0x1d5e33c, nFileSizeHigh=0x0, nFileSizeLow=0x17e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xn2srH K_PZL4_UAhpr.pps", cAlternateFileName="XN2SRH~1.PPS")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f153510, ftCreationTime.dwHighDateTime=0x1d5ee72, ftLastAccessTime.dwLowDateTime=0x52644b0, ftLastAccessTime.dwHighDateTime=0x1d5e4e7, ftLastWriteTime.dwLowDateTime=0x52644b0, ftLastWriteTime.dwHighDateTime=0x1d5e4e7, nFileSizeHigh=0x0, nFileSizeLow=0x117c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zI o56T3ghe1br2qm.docx", cAlternateFileName="ZIO56T~1.DOC")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529717f0, ftCreationTime.dwHighDateTime=0x1d5e4f2, ftLastAccessTime.dwLowDateTime=0x7980a820, ftLastAccessTime.dwHighDateTime=0x1d5e319, ftLastWriteTime.dwLowDateTime=0x7980a820, ftLastWriteTime.dwHighDateTime=0x1d5e319, nFileSizeHigh=0x0, nFileSizeLow=0x148d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="zQrp.pptx", cAlternateFileName="ZQRP~1.PPT")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6dda0, ftCreationTime.dwHighDateTime=0x1d5e5cb, ftLastAccessTime.dwLowDateTime=0xbbf99b80, ftLastAccessTime.dwHighDateTime=0x1d5f0a7, ftLastWriteTime.dwLowDateTime=0xbbf99b80, ftLastWriteTime.dwHighDateTime=0x1d5f0a7, nFileSizeHigh=0x0, nFileSizeLow=0x65e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_oQnSmiqmv.ots", cAlternateFileName="_OQNSM~1.OTS")) returned 1 [0132.111] FindNextFileW (in: hFindFile=0x581c330, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.111] FindClose (in: hFindFile=0x581c330 | out: hFindFile=0x581c330) returned 1 [0132.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0132.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0132.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx", lpFilePart=0x0) returned 0x4f [0132.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\k5tya1.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0132.114] GetFileType (hFile=0x78c) returned 0x1 [0132.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.114] GetFileType (hFile=0x78c) returned 0x1 [0132.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx.P4WN3D", lpFilePart=0x0) returned 0x56 [0132.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\k5tya1.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0132.115] GetFileType (hFile=0x788) returned 0x1 [0132.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.115] GetFileType (hFile=0x788) returned 0x1 [0132.115] SetEndOfFile (hFile=0x788) returned 1 [0132.115] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xa9c1 [0132.115] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.116] WriteFile (in: hFile=0x788, lpBuffer=0x2bba058*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bba058*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.117] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.117] WriteFile (in: hFile=0x788, lpBuffer=0x2bbb064*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbb064*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.118] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.118] WriteFile (in: hFile=0x788, lpBuffer=0x2bbc070*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbc070*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.118] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.131] WriteFile (in: hFile=0x788, lpBuffer=0x2bbd07c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbd07c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.132] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.132] WriteFile (in: hFile=0x788, lpBuffer=0x2bbe088*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbe088*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.132] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.132] WriteFile (in: hFile=0x788, lpBuffer=0x2bbf094*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bbf094*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.132] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.133] WriteFile (in: hFile=0x788, lpBuffer=0x2bc00a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc00a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.133] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.133] WriteFile (in: hFile=0x788, lpBuffer=0x2bc10ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc10ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.133] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.133] WriteFile (in: hFile=0x788, lpBuffer=0x2bc20b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc20b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.134] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.134] WriteFile (in: hFile=0x788, lpBuffer=0x2bc30c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc30c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.134] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb8c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb8c08*, lpNumberOfBytesRead=0xb3f1fc*=0x9c1, lpOverlapped=0x0) returned 1 [0132.135] WriteFile (in: hFile=0x788, lpBuffer=0x2bc4a9c*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bc4a9c*, lpNumberOfBytesWritten=0xb3f1b4*=0x9d0, lpOverlapped=0x0) returned 1 [0132.135] CloseHandle (hObject=0x788) returned 1 [0132.137] CloseHandle (hObject=0x78c) returned 1 [0132.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx", lpFilePart=0x0) returned 0x4f [0132.139] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\K5Tya1.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\k5tya1.pptx")) returned 1 [0132.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt", lpFilePart=0x0) returned 0x4e [0132.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\rwos95.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0132.248] GetFileType (hFile=0x78c) returned 0x1 [0132.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.248] GetFileType (hFile=0x78c) returned 0x1 [0132.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt.P4WN3D", lpFilePart=0x0) returned 0x55 [0132.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\rwos95.ppt.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0132.249] GetFileType (hFile=0x788) returned 0x1 [0132.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.249] GetFileType (hFile=0x788) returned 0x1 [0132.249] SetEndOfFile (hFile=0x788) returned 1 [0132.249] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xf69e [0132.249] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.250] WriteFile (in: hFile=0x788, lpBuffer=0x2bc7d68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc7d68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.251] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.252] WriteFile (in: hFile=0x788, lpBuffer=0x2bc8d74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc8d74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.252] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.252] WriteFile (in: hFile=0x788, lpBuffer=0x2bc9d80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bc9d80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.252] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.252] WriteFile (in: hFile=0x788, lpBuffer=0x2bcad8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bcad8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.253] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.253] WriteFile (in: hFile=0x788, lpBuffer=0x2bcbd98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bcbd98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.253] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.254] WriteFile (in: hFile=0x788, lpBuffer=0x2bccda4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bccda4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.254] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.255] WriteFile (in: hFile=0x788, lpBuffer=0x2bcddb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bcddb0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.255] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.255] WriteFile (in: hFile=0x788, lpBuffer=0x2bcedbc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bcedbc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.255] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.255] WriteFile (in: hFile=0x788, lpBuffer=0x2bcfdc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bcfdc8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.256] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.256] WriteFile (in: hFile=0x788, lpBuffer=0x2bd0dd4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd0dd4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.256] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.256] WriteFile (in: hFile=0x788, lpBuffer=0x2bd1de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd1de0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.256] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.257] WriteFile (in: hFile=0x788, lpBuffer=0x2bd2dec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd2dec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.257] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.257] WriteFile (in: hFile=0x788, lpBuffer=0x2bd3df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd3df8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.257] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.257] WriteFile (in: hFile=0x788, lpBuffer=0x2bd4e04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd4e04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.257] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.258] WriteFile (in: hFile=0x788, lpBuffer=0x2bd5e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd5e10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.258] ReadFile (in: hFile=0x78c, lpBuffer=0x2bc6918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bc6918*, lpNumberOfBytesRead=0xb3f1fc*=0x69e, lpOverlapped=0x0) returned 1 [0132.258] WriteFile (in: hFile=0x788, lpBuffer=0x2bd74b8*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bd74b8*, lpNumberOfBytesWritten=0xb3f1b4*=0x6a0, lpOverlapped=0x0) returned 1 [0132.258] CloseHandle (hObject=0x788) returned 1 [0132.262] CloseHandle (hObject=0x78c) returned 1 [0132.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt", lpFilePart=0x0) returned 0x4e [0132.264] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\RWOs95.ppt" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\rwos95.ppt")) returned 1 [0132.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc", lpFilePart=0x0) returned 0x53 [0132.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\wekstaebykw.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0132.434] GetFileType (hFile=0x78c) returned 0x1 [0132.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.434] GetFileType (hFile=0x78c) returned 0x1 [0132.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc.P4WN3D", lpFilePart=0x0) returned 0x5a [0132.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\wekstaebykw.doc.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0132.435] GetFileType (hFile=0x788) returned 0x1 [0132.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.435] GetFileType (hFile=0x788) returned 0x1 [0132.435] SetEndOfFile (hFile=0x788) returned 1 [0132.435] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x16d70 [0132.435] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.436] WriteFile (in: hFile=0x788, lpBuffer=0x2bda7ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bda7ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.438] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.438] WriteFile (in: hFile=0x788, lpBuffer=0x2bdb7b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bdb7b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.438] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.439] WriteFile (in: hFile=0x788, lpBuffer=0x2bdc7c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bdc7c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.439] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.439] WriteFile (in: hFile=0x788, lpBuffer=0x2bdd7d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bdd7d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.439] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.440] WriteFile (in: hFile=0x788, lpBuffer=0x2bde7dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bde7dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.440] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.440] WriteFile (in: hFile=0x788, lpBuffer=0x2bdf7e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bdf7e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.440] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.441] WriteFile (in: hFile=0x788, lpBuffer=0x2be07f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be07f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.441] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.441] WriteFile (in: hFile=0x788, lpBuffer=0x2be1800*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be1800*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.441] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.442] WriteFile (in: hFile=0x788, lpBuffer=0x2be280c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be280c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.442] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.442] WriteFile (in: hFile=0x788, lpBuffer=0x2be3818*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be3818*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.442] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.443] WriteFile (in: hFile=0x788, lpBuffer=0x2be4824*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be4824*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.443] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.443] WriteFile (in: hFile=0x788, lpBuffer=0x2be5830*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be5830*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.443] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.444] WriteFile (in: hFile=0x788, lpBuffer=0x2be683c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be683c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.444] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.444] WriteFile (in: hFile=0x788, lpBuffer=0x2be7848*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be7848*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.444] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.445] WriteFile (in: hFile=0x788, lpBuffer=0x2be8854*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be8854*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.445] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.445] WriteFile (in: hFile=0x788, lpBuffer=0x2be9860*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2be9860*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.445] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.446] WriteFile (in: hFile=0x788, lpBuffer=0x2bea86c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bea86c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.446] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.509] WriteFile (in: hFile=0x788, lpBuffer=0x2beb878*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2beb878*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.509] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.510] WriteFile (in: hFile=0x788, lpBuffer=0x2bec884*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bec884*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.510] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.510] WriteFile (in: hFile=0x788, lpBuffer=0x2bed890*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bed890*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.511] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.511] WriteFile (in: hFile=0x788, lpBuffer=0x2bee89c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bee89c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.511] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.512] WriteFile (in: hFile=0x788, lpBuffer=0x2bef8a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bef8a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.512] ReadFile (in: hFile=0x78c, lpBuffer=0x2bd935c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bd935c*, lpNumberOfBytesRead=0xb3f1fc*=0xd70, lpOverlapped=0x0) returned 1 [0132.512] WriteFile (in: hFile=0x788, lpBuffer=0x2bf1630*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bf1630*, lpNumberOfBytesWritten=0xb3f1b4*=0xd80, lpOverlapped=0x0) returned 1 [0132.513] CloseHandle (hObject=0x788) returned 1 [0132.525] CloseHandle (hObject=0x78c) returned 1 [0132.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc", lpFilePart=0x0) returned 0x53 [0132.528] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\wEKSTaeByKw.doc" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\wekstaebykw.doc")) returned 1 [0132.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx", lpFilePart=0x0) returned 0x5a [0132.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\zi o56t3ghe1br2qm.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0132.702] GetFileType (hFile=0x78c) returned 0x1 [0132.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.702] GetFileType (hFile=0x78c) returned 0x1 [0132.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx.P4WN3D", lpFilePart=0x0) returned 0x61 [0132.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\zi o56t3ghe1br2qm.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0132.703] GetFileType (hFile=0x788) returned 0x1 [0132.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.703] GetFileType (hFile=0x788) returned 0x1 [0132.703] SetEndOfFile (hFile=0x788) returned 1 [0132.704] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x117c0 [0132.704] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.705] WriteFile (in: hFile=0x788, lpBuffer=0x2bf4984*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf4984*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.707] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.707] WriteFile (in: hFile=0x788, lpBuffer=0x2bf5990*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf5990*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.707] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.708] WriteFile (in: hFile=0x788, lpBuffer=0x2bf699c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf699c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.708] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.708] WriteFile (in: hFile=0x788, lpBuffer=0x2bf79a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf79a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.709] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.709] WriteFile (in: hFile=0x788, lpBuffer=0x2bf89b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf89b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.709] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.710] WriteFile (in: hFile=0x788, lpBuffer=0x2bf99c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bf99c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.710] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.710] WriteFile (in: hFile=0x788, lpBuffer=0x2bfa9cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfa9cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.710] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.711] WriteFile (in: hFile=0x788, lpBuffer=0x2bfb9d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfb9d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.711] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.711] WriteFile (in: hFile=0x788, lpBuffer=0x2bfc9e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfc9e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.712] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.712] WriteFile (in: hFile=0x788, lpBuffer=0x2bfd9f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfd9f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.712] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.713] WriteFile (in: hFile=0x788, lpBuffer=0x2bfe9fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bfe9fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.713] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.713] WriteFile (in: hFile=0x788, lpBuffer=0x2bffa08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bffa08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.713] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.714] WriteFile (in: hFile=0x788, lpBuffer=0x2c00a14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c00a14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.714] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.714] WriteFile (in: hFile=0x788, lpBuffer=0x2c01a20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c01a20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.715] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.715] WriteFile (in: hFile=0x788, lpBuffer=0x2c02a2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c02a2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.715] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.715] WriteFile (in: hFile=0x788, lpBuffer=0x2c03a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c03a38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.716] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.716] WriteFile (in: hFile=0x788, lpBuffer=0x2c04a44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c04a44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.716] ReadFile (in: hFile=0x78c, lpBuffer=0x2bf3534, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bf3534*, lpNumberOfBytesRead=0xb3f1fc*=0x7c0, lpOverlapped=0x0) returned 1 [0132.717] WriteFile (in: hFile=0x788, lpBuffer=0x2c0621c*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c0621c*, lpNumberOfBytesWritten=0xb3f1b4*=0x7d0, lpOverlapped=0x0) returned 1 [0132.717] CloseHandle (hObject=0x788) returned 1 [0132.720] CloseHandle (hObject=0x78c) returned 1 [0132.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx", lpFilePart=0x0) returned 0x5a [0132.722] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zI o56T3ghe1br2qm.docx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\zi o56t3ghe1br2qm.docx")) returned 1 [0132.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx", lpFilePart=0x0) returned 0x4d [0132.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\zqrp.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0132.812] GetFileType (hFile=0x78c) returned 0x1 [0132.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.812] GetFileType (hFile=0x78c) returned 0x1 [0132.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx.P4WN3D", lpFilePart=0x0) returned 0x54 [0132.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\zqrp.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0132.813] GetFileType (hFile=0x788) returned 0x1 [0132.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.813] GetFileType (hFile=0x788) returned 0x1 [0132.813] SetEndOfFile (hFile=0x788) returned 1 [0132.813] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x148d5 [0132.813] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.815] WriteFile (in: hFile=0x788, lpBuffer=0x2c09510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c09510*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.816] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.817] WriteFile (in: hFile=0x788, lpBuffer=0x2c0a51c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0a51c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.817] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.817] WriteFile (in: hFile=0x788, lpBuffer=0x2c0b528*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0b528*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.818] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.818] WriteFile (in: hFile=0x788, lpBuffer=0x2c0c534*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0c534*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.818] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.819] WriteFile (in: hFile=0x788, lpBuffer=0x2c0d540*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0d540*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.819] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.819] WriteFile (in: hFile=0x788, lpBuffer=0x2c0e54c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0e54c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.820] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.820] WriteFile (in: hFile=0x788, lpBuffer=0x2c0f558*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0f558*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.820] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.820] WriteFile (in: hFile=0x788, lpBuffer=0x2c10564*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c10564*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.821] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.821] WriteFile (in: hFile=0x788, lpBuffer=0x2c11570*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c11570*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.821] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.900] WriteFile (in: hFile=0x788, lpBuffer=0x2c1257c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1257c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.901] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.901] WriteFile (in: hFile=0x788, lpBuffer=0x2c13588*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c13588*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.901] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.902] WriteFile (in: hFile=0x788, lpBuffer=0x2c14594*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c14594*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.902] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.902] WriteFile (in: hFile=0x788, lpBuffer=0x2c155a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c155a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.902] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.903] WriteFile (in: hFile=0x788, lpBuffer=0x2c165ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c165ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.903] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.903] WriteFile (in: hFile=0x788, lpBuffer=0x2c175b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c175b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.904] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.904] WriteFile (in: hFile=0x788, lpBuffer=0x2c185c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c185c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.904] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.904] WriteFile (in: hFile=0x788, lpBuffer=0x2c195d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c195d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.905] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.905] WriteFile (in: hFile=0x788, lpBuffer=0x2c1a5dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1a5dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.905] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.905] WriteFile (in: hFile=0x788, lpBuffer=0x2c1b5e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1b5e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.906] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.906] WriteFile (in: hFile=0x788, lpBuffer=0x2c1c5f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1c5f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.906] ReadFile (in: hFile=0x78c, lpBuffer=0x2c080c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c080c0*, lpNumberOfBytesRead=0xb3f1fc*=0x8d5, lpOverlapped=0x0) returned 1 [0132.907] WriteFile (in: hFile=0x788, lpBuffer=0x2c1dedc*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c1dedc*, lpNumberOfBytesWritten=0xb3f1b4*=0x8e0, lpOverlapped=0x0) returned 1 [0132.907] CloseHandle (hObject=0x788) returned 1 [0132.910] CloseHandle (hObject=0x78c) returned 1 [0132.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx", lpFilePart=0x0) returned 0x4d [0132.912] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\C88ZZWLu 8ct2QXY\\kJ4g3dOlN66IH-\\1ripCiHS8\\zQrp.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\c88zzwlu 8ct2qxy\\kj4g3doln66ih-\\1ripcihs8\\zqrp.pptx")) returned 1 [0132.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0132.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0132.916] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x51197f4b, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x51197f4b, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581ceb0 [0132.916] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x51197f4b, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x51197f4b, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.917] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9c6b6b0, ftCreationTime.dwHighDateTime=0x1d5e0c0, ftLastAccessTime.dwLowDateTime=0x352e3a00, ftLastAccessTime.dwHighDateTime=0x1d5e6c7, ftLastWriteTime.dwLowDateTime=0x352e3a00, ftLastWriteTime.dwHighDateTime=0x1d5e6c7, nFileSizeHigh=0x0, nFileSizeLow=0x14386, dwReserved0=0x0, dwReserved1=0x0, cFileName="3V-VvdXRkr9VL9J3PcV.png", cAlternateFileName="3V-VVD~1.PNG")) returned 1 [0132.917] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410df6e0, ftCreationTime.dwHighDateTime=0x1d5e3ce, ftLastAccessTime.dwLowDateTime=0xac9e0e50, ftLastAccessTime.dwHighDateTime=0x1d5e1d9, ftLastWriteTime.dwLowDateTime=0xac9e0e50, ftLastWriteTime.dwHighDateTime=0x1d5e1d9, nFileSizeHigh=0x0, nFileSizeLow=0x12a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="4hfD2m5XtTX016QuK.wav", cAlternateFileName="4HFD2M~1.WAV")) returned 1 [0132.917] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638f3860, ftCreationTime.dwHighDateTime=0x1d5ee81, ftLastAccessTime.dwLowDateTime=0x71c8c120, ftLastAccessTime.dwHighDateTime=0x1d5e22f, ftLastWriteTime.dwLowDateTime=0x71c8c120, ftLastWriteTime.dwHighDateTime=0x1d5e22f, nFileSizeHigh=0x0, nFileSizeLow=0x265e, dwReserved0=0x0, dwReserved1=0x0, cFileName="8nir.swf", cAlternateFileName="")) returned 1 [0132.917] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be00a70, ftCreationTime.dwHighDateTime=0x1d5f0d2, ftLastAccessTime.dwLowDateTime=0x54d2e760, ftLastAccessTime.dwHighDateTime=0x1d5e885, ftLastWriteTime.dwLowDateTime=0x54d2e760, ftLastWriteTime.dwHighDateTime=0x1d5e885, nFileSizeHigh=0x0, nFileSizeLow=0x15ec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="aFaQjHy02N5 Lz.mp4", cAlternateFileName="AFAQJH~1.MP4")) returned 1 [0132.918] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b883600, ftCreationTime.dwHighDateTime=0x1d61c67, ftLastAccessTime.dwLowDateTime=0x3b883600, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x5f944900, ftLastWriteTime.dwHighDateTime=0x1d61c60, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctfmon.exe", cAlternateFileName="")) returned 1 [0132.918] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.918] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78bec420, ftCreationTime.dwHighDateTime=0x1d5e48c, ftLastAccessTime.dwLowDateTime=0x4ba99e90, ftLastAccessTime.dwHighDateTime=0x1d5eae7, ftLastWriteTime.dwLowDateTime=0x4ba99e90, ftLastWriteTime.dwHighDateTime=0x1d5eae7, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="DjGJFb m.rtf", cAlternateFileName="DJGJFB~1.RTF")) returned 1 [0132.918] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0adeab0, ftCreationTime.dwHighDateTime=0x1d5ee56, ftLastAccessTime.dwLowDateTime=0xf514dae0, ftLastAccessTime.dwHighDateTime=0x1d5eae6, ftLastWriteTime.dwLowDateTime=0xf514dae0, ftLastWriteTime.dwHighDateTime=0x1d5eae6, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAa-reA-hk1ATTtVi.xlsx", cAlternateFileName="EAA-RE~1.XLS")) returned 1 [0132.918] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843dc1d0, ftCreationTime.dwHighDateTime=0x1d5ed64, ftLastAccessTime.dwLowDateTime=0x6cf00470, ftLastAccessTime.dwHighDateTime=0x1d5f01b, ftLastWriteTime.dwLowDateTime=0x6cf00470, ftLastWriteTime.dwHighDateTime=0x1d5f01b, nFileSizeHigh=0x0, nFileSizeLow=0xbca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fBwSr AL8.swf", cAlternateFileName="FBWSRA~1.SWF")) returned 1 [0132.919] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f008740, ftCreationTime.dwHighDateTime=0x1d5ecba, ftLastAccessTime.dwLowDateTime=0xb5c9170, ftLastAccessTime.dwHighDateTime=0x1d5f119, ftLastWriteTime.dwLowDateTime=0xb5c9170, ftLastWriteTime.dwHighDateTime=0x1d5f119, nFileSizeHigh=0x0, nFileSizeLow=0xb16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="fXw5gy8AHox-E-T.mp4", cAlternateFileName="FXW5GY~1.MP4")) returned 1 [0132.919] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d42160, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0x4d9805b0, ftLastAccessTime.dwHighDateTime=0x1d5ef48, ftLastWriteTime.dwLowDateTime=0x4d9805b0, ftLastWriteTime.dwHighDateTime=0x1d5ef48, nFileSizeHigh=0x0, nFileSizeLow=0xc704, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1R1oG7uZJ RI9M6.pptx", cAlternateFileName="G1R1OG~1.PPT")) returned 1 [0132.919] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a512700, ftCreationTime.dwHighDateTime=0x1d5e136, ftLastAccessTime.dwLowDateTime=0x70edf210, ftLastAccessTime.dwHighDateTime=0x1d5eed3, ftLastWriteTime.dwLowDateTime=0x70edf210, ftLastWriteTime.dwHighDateTime=0x1d5eed3, nFileSizeHigh=0x0, nFileSizeLow=0xe3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDUQyoBXjiL2nP5.rtf", cAlternateFileName="GDUQYO~1.RTF")) returned 1 [0132.919] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc78900, ftCreationTime.dwHighDateTime=0x1d5e83c, ftLastAccessTime.dwLowDateTime=0x7e2a09c0, ftLastAccessTime.dwHighDateTime=0x1d5ef3f, ftLastWriteTime.dwLowDateTime=0x7e2a09c0, ftLastWriteTime.dwHighDateTime=0x1d5ef3f, nFileSizeHigh=0x0, nFileSizeLow=0x91a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="I6ZzNBLIR.m4a", cAlternateFileName="I6ZZNB~1.M4A")) returned 1 [0132.920] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898dab60, ftCreationTime.dwHighDateTime=0x1d5e11a, ftLastAccessTime.dwLowDateTime=0x67dac3f0, ftLastAccessTime.dwHighDateTime=0x1d5eeb1, ftLastWriteTime.dwLowDateTime=0x67dac3f0, ftLastWriteTime.dwHighDateTime=0x1d5eeb1, nFileSizeHigh=0x0, nFileSizeLow=0xdbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KrWLk_ktNYH.wav", cAlternateFileName="KRWLK_~1.WAV")) returned 1 [0132.920] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc90f00, ftCreationTime.dwHighDateTime=0x1d5ebec, ftLastAccessTime.dwLowDateTime=0xa0ac5ee0, ftLastAccessTime.dwHighDateTime=0x1d5f03d, ftLastWriteTime.dwLowDateTime=0xa0ac5ee0, ftLastWriteTime.dwHighDateTime=0x1d5f03d, nFileSizeHigh=0x0, nFileSizeLow=0xf918, dwReserved0=0x0, dwReserved1=0x0, cFileName="KzPHcaMzzPfVST6VDP.mp3", cAlternateFileName="KZPHCA~1.MP3")) returned 1 [0132.920] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efcb720, ftCreationTime.dwHighDateTime=0x1d5e1e0, ftLastAccessTime.dwLowDateTime=0x1b748740, ftLastAccessTime.dwHighDateTime=0x1d5ec53, ftLastWriteTime.dwLowDateTime=0x1b748740, ftLastWriteTime.dwHighDateTime=0x1d5ec53, nFileSizeHigh=0x0, nFileSizeLow=0x52d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LhOK75rd2Dc PWsth is.gif", cAlternateFileName="LHOK75~1.GIF")) returned 1 [0132.920] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b0a40, ftCreationTime.dwHighDateTime=0x1d5eba8, ftLastAccessTime.dwLowDateTime=0x20f99a70, ftLastAccessTime.dwHighDateTime=0x1d5e0e1, ftLastWriteTime.dwLowDateTime=0x20f99a70, ftLastWriteTime.dwHighDateTime=0x1d5e0e1, nFileSizeHigh=0x0, nFileSizeLow=0x10540, dwReserved0=0x0, dwReserved1=0x0, cFileName="mE AgPmEdACD.csv", cAlternateFileName="MEAGPM~1.CSV")) returned 1 [0132.920] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5029fe0, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xec70c560, ftLastAccessTime.dwHighDateTime=0x1d5f06e, ftLastWriteTime.dwLowDateTime=0xec70c560, ftLastWriteTime.dwHighDateTime=0x1d5f06e, nFileSizeHigh=0x0, nFileSizeLow=0x136ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="mM2sOVkR DsjOD-r.avi", cAlternateFileName="MM2SOV~1.AVI")) returned 1 [0132.921] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d80c50, ftCreationTime.dwHighDateTime=0x1d5e61a, ftLastAccessTime.dwLowDateTime=0xdf2b2a20, ftLastAccessTime.dwHighDateTime=0x1d5ea57, ftLastWriteTime.dwLowDateTime=0xdf2b2a20, ftLastWriteTime.dwHighDateTime=0x1d5ea57, nFileSizeHigh=0x0, nFileSizeLow=0xe289, dwReserved0=0x0, dwReserved1=0x0, cFileName="oz1wxxjyP4gePV.jpg", cAlternateFileName="OZ1WXX~1.JPG")) returned 1 [0132.921] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7544b0, ftCreationTime.dwHighDateTime=0x1d5e177, ftLastAccessTime.dwLowDateTime=0x1e9cbae0, ftLastAccessTime.dwHighDateTime=0x1d5e614, ftLastWriteTime.dwLowDateTime=0x1e9cbae0, ftLastWriteTime.dwHighDateTime=0x1d5e614, nFileSizeHigh=0x0, nFileSizeLow=0x11ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="p eJEJwq7NKXrtf.gif", cAlternateFileName="PEJEJW~1.GIF")) returned 1 [0132.921] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x372e2fc0, ftCreationTime.dwHighDateTime=0x1d5e0d4, ftLastAccessTime.dwLowDateTime=0xf49434b0, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0xf49434b0, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x6b72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PpBwKL3XDYUwK.jpg", cAlternateFileName="PPBWKL~1.JPG")) returned 1 [0132.921] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428607c0, ftCreationTime.dwHighDateTime=0x1d5ebac, ftLastAccessTime.dwLowDateTime=0x195ea8a0, ftLastAccessTime.dwHighDateTime=0x1d5ed9d, ftLastWriteTime.dwLowDateTime=0x195ea8a0, ftLastWriteTime.dwHighDateTime=0x1d5ed9d, nFileSizeHigh=0x0, nFileSizeLow=0xf121, dwReserved0=0x0, dwReserved1=0x0, cFileName="RW7aBhlNHgJo15fCQo H.mkv", cAlternateFileName="RW7ABH~1.MKV")) returned 1 [0132.922] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2772e1e0, ftCreationTime.dwHighDateTime=0x1d5e7a8, ftLastAccessTime.dwLowDateTime=0xa1ffb2f0, ftLastAccessTime.dwHighDateTime=0x1d5eae4, ftLastWriteTime.dwLowDateTime=0xa1ffb2f0, ftLastWriteTime.dwHighDateTime=0x1d5eae4, nFileSizeHigh=0x0, nFileSizeLow=0x324e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rzv5v-F9dqF6.mp3", cAlternateFileName="RZV5V-~1.MP3")) returned 1 [0132.922] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a3deb0, ftCreationTime.dwHighDateTime=0x1d5ebdd, ftLastAccessTime.dwLowDateTime=0xa092b320, ftLastAccessTime.dwHighDateTime=0x1d5eece, ftLastWriteTime.dwLowDateTime=0xa092b320, ftLastWriteTime.dwHighDateTime=0x1d5eece, nFileSizeHigh=0x0, nFileSizeLow=0xf294, dwReserved0=0x0, dwReserved1=0x0, cFileName="SxjbHhg.mp3", cAlternateFileName="")) returned 1 [0132.922] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449158c0, ftCreationTime.dwHighDateTime=0x1d5e4b4, ftLastAccessTime.dwLowDateTime=0x7c082c0, ftLastAccessTime.dwHighDateTime=0x1d5e493, ftLastWriteTime.dwLowDateTime=0x7c082c0, ftLastWriteTime.dwHighDateTime=0x1d5e493, nFileSizeHigh=0x0, nFileSizeLow=0x149a, dwReserved0=0x0, dwReserved1=0x0, cFileName="tbQID kwf.xls", cAlternateFileName="TBQIDK~1.XLS")) returned 1 [0132.922] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4dbcdf0, ftCreationTime.dwHighDateTime=0x1d5e29f, ftLastAccessTime.dwLowDateTime=0xbcb4ab30, ftLastAccessTime.dwHighDateTime=0x1d5e8b1, ftLastWriteTime.dwLowDateTime=0xbcb4ab30, ftLastWriteTime.dwHighDateTime=0x1d5e8b1, nFileSizeHigh=0x0, nFileSizeLow=0x17bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrRIe4oRo63pHb4u-V.rtf", cAlternateFileName="TRRIE4~1.RTF")) returned 1 [0132.922] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d74ba80, ftCreationTime.dwHighDateTime=0x1d5e605, ftLastAccessTime.dwLowDateTime=0x78ad5830, ftLastAccessTime.dwHighDateTime=0x1d5ec51, ftLastWriteTime.dwLowDateTime=0x78ad5830, ftLastWriteTime.dwHighDateTime=0x1d5ec51, nFileSizeHigh=0x0, nFileSizeLow=0xd32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="tT1Tx.docx", cAlternateFileName="TT1TX~1.DOC")) returned 1 [0132.923] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59827a80, ftCreationTime.dwHighDateTime=0x1d5e508, ftLastAccessTime.dwLowDateTime=0x5f3e4fd0, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x5f3e4fd0, ftLastWriteTime.dwHighDateTime=0x1d5e765, nFileSizeHigh=0x0, nFileSizeLow=0xa6f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="U-uxJFdWkC1M-wO6cUKB.bmp", cAlternateFileName="U-UXJF~1.BMP")) returned 1 [0132.923] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9ff460, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x486509b0, ftLastAccessTime.dwHighDateTime=0x1d5e2ca, ftLastWriteTime.dwLowDateTime=0x486509b0, ftLastWriteTime.dwHighDateTime=0x1d5e2ca, nFileSizeHigh=0x0, nFileSizeLow=0x9708, dwReserved0=0x0, dwReserved1=0x0, cFileName="uO MS9hVAQqXyw.bmp", cAlternateFileName="UOMS9H~1.BMP")) returned 1 [0132.923] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5087a4f0, ftCreationTime.dwHighDateTime=0x1d5e88c, ftLastAccessTime.dwLowDateTime=0x9ca95370, ftLastAccessTime.dwHighDateTime=0x1d5ef5c, ftLastWriteTime.dwLowDateTime=0x9ca95370, ftLastWriteTime.dwHighDateTime=0x1d5ef5c, nFileSizeHigh=0x0, nFileSizeLow=0x16d2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vZyE.png", cAlternateFileName="")) returned 1 [0132.923] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cc18ab0, ftCreationTime.dwHighDateTime=0x1d5e1fa, ftLastAccessTime.dwLowDateTime=0x8054b180, ftLastAccessTime.dwHighDateTime=0x1d5e113, ftLastWriteTime.dwLowDateTime=0x8054b180, ftLastWriteTime.dwHighDateTime=0x1d5e113, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtTK", cAlternateFileName="")) returned 1 [0132.924] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85d0480, ftCreationTime.dwHighDateTime=0x1d5ee42, ftLastAccessTime.dwLowDateTime=0x878d6e60, ftLastAccessTime.dwHighDateTime=0x1d5e366, ftLastWriteTime.dwLowDateTime=0x878d6e60, ftLastWriteTime.dwHighDateTime=0x1d5e366, nFileSizeHigh=0x0, nFileSizeLow=0x3110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y58zNJtwG3kek2x.jpg", cAlternateFileName="Y58ZNJ~1.JPG")) returned 1 [0132.924] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77a3ca0, ftCreationTime.dwHighDateTime=0x1d5e222, ftLastAccessTime.dwLowDateTime=0xdaf5b270, ftLastAccessTime.dwHighDateTime=0x1d5e0c2, ftLastWriteTime.dwLowDateTime=0xdaf5b270, ftLastWriteTime.dwHighDateTime=0x1d5e0c2, nFileSizeHigh=0x0, nFileSizeLow=0x2aa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yawl.gif", cAlternateFileName="")) returned 1 [0132.924] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10b9bf0, ftCreationTime.dwHighDateTime=0x1d5e302, ftLastAccessTime.dwLowDateTime=0x759682f0, ftLastAccessTime.dwHighDateTime=0x1d5e398, ftLastWriteTime.dwLowDateTime=0x759682f0, ftLastWriteTime.dwHighDateTime=0x1d5e398, nFileSizeHigh=0x0, nFileSizeLow=0x239d, dwReserved0=0x0, dwReserved1=0x0, cFileName="yved5LTWSIQ3yaO.avi", cAlternateFileName="YVED5L~1.AVI")) returned 1 [0132.924] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d102a60, ftCreationTime.dwHighDateTime=0x1d5e509, ftLastAccessTime.dwLowDateTime=0x8618f020, ftLastAccessTime.dwHighDateTime=0x1d5ee85, ftLastWriteTime.dwLowDateTime=0x8618f020, ftLastWriteTime.dwHighDateTime=0x1d5ee85, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="yWbI.mkv", cAlternateFileName="")) returned 1 [0132.924] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd94d1e0, ftCreationTime.dwHighDateTime=0x1d5ed46, ftLastAccessTime.dwLowDateTime=0x24b8260, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x24b8260, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z6uv3qRB.docx", cAlternateFileName="Z6UV3Q~1.DOC")) returned 1 [0132.925] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f0a420, ftCreationTime.dwHighDateTime=0x1d5e49c, ftLastAccessTime.dwLowDateTime=0xde63bc50, ftLastAccessTime.dwHighDateTime=0x1d5f0b6, ftLastWriteTime.dwLowDateTime=0xde63bc50, ftLastWriteTime.dwHighDateTime=0x1d5f0b6, nFileSizeHigh=0x0, nFileSizeLow=0x13890, dwReserved0=0x0, dwReserved1=0x0, cFileName="_USg.png", cAlternateFileName="")) returned 1 [0132.925] FindNextFileW (in: hFindFile=0x581ceb0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f0a420, ftCreationTime.dwHighDateTime=0x1d5e49c, ftLastAccessTime.dwLowDateTime=0xde63bc50, ftLastAccessTime.dwHighDateTime=0x1d5f0b6, ftLastWriteTime.dwLowDateTime=0xde63bc50, ftLastWriteTime.dwHighDateTime=0x1d5f0b6, nFileSizeHigh=0x0, nFileSizeLow=0x13890, dwReserved0=0x0, dwReserved1=0x0, cFileName="_USg.png", cAlternateFileName="")) returned 0 [0132.925] FindClose (in: hFindFile=0x581ceb0 | out: hFindFile=0x581ceb0) returned 1 [0132.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0132.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0132.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0132.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0132.926] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x51197f4b, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x51197f4b, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x581d270 [0132.926] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x51197f4b, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x51197f4b, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.926] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9c6b6b0, ftCreationTime.dwHighDateTime=0x1d5e0c0, ftLastAccessTime.dwLowDateTime=0x352e3a00, ftLastAccessTime.dwHighDateTime=0x1d5e6c7, ftLastWriteTime.dwLowDateTime=0x352e3a00, ftLastWriteTime.dwHighDateTime=0x1d5e6c7, nFileSizeHigh=0x0, nFileSizeLow=0x14386, dwReserved0=0x0, dwReserved1=0x0, cFileName="3V-VvdXRkr9VL9J3PcV.png", cAlternateFileName="3V-VVD~1.PNG")) returned 1 [0132.926] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x410df6e0, ftCreationTime.dwHighDateTime=0x1d5e3ce, ftLastAccessTime.dwLowDateTime=0xac9e0e50, ftLastAccessTime.dwHighDateTime=0x1d5e1d9, ftLastWriteTime.dwLowDateTime=0xac9e0e50, ftLastWriteTime.dwHighDateTime=0x1d5e1d9, nFileSizeHigh=0x0, nFileSizeLow=0x12a62, dwReserved0=0x0, dwReserved1=0x0, cFileName="4hfD2m5XtTX016QuK.wav", cAlternateFileName="4HFD2M~1.WAV")) returned 1 [0132.926] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638f3860, ftCreationTime.dwHighDateTime=0x1d5ee81, ftLastAccessTime.dwLowDateTime=0x71c8c120, ftLastAccessTime.dwHighDateTime=0x1d5e22f, ftLastWriteTime.dwLowDateTime=0x71c8c120, ftLastWriteTime.dwHighDateTime=0x1d5e22f, nFileSizeHigh=0x0, nFileSizeLow=0x265e, dwReserved0=0x0, dwReserved1=0x0, cFileName="8nir.swf", cAlternateFileName="")) returned 1 [0132.927] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4be00a70, ftCreationTime.dwHighDateTime=0x1d5f0d2, ftLastAccessTime.dwLowDateTime=0x54d2e760, ftLastAccessTime.dwHighDateTime=0x1d5e885, ftLastWriteTime.dwLowDateTime=0x54d2e760, ftLastWriteTime.dwHighDateTime=0x1d5e885, nFileSizeHigh=0x0, nFileSizeLow=0x15ec9, dwReserved0=0x0, dwReserved1=0x0, cFileName="aFaQjHy02N5 Lz.mp4", cAlternateFileName="AFAQJH~1.MP4")) returned 1 [0132.927] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b883600, ftCreationTime.dwHighDateTime=0x1d61c67, ftLastAccessTime.dwLowDateTime=0x3b883600, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x5f944900, ftLastWriteTime.dwHighDateTime=0x1d61c60, nFileSizeHigh=0x0, nFileSizeLow=0x19400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ctfmon.exe", cAlternateFileName="")) returned 1 [0132.927] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0132.927] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78bec420, ftCreationTime.dwHighDateTime=0x1d5e48c, ftLastAccessTime.dwLowDateTime=0x4ba99e90, ftLastAccessTime.dwHighDateTime=0x1d5eae7, ftLastWriteTime.dwLowDateTime=0x4ba99e90, ftLastWriteTime.dwHighDateTime=0x1d5eae7, nFileSizeHigh=0x0, nFileSizeLow=0x2466, dwReserved0=0x0, dwReserved1=0x0, cFileName="DjGJFb m.rtf", cAlternateFileName="DJGJFB~1.RTF")) returned 1 [0132.927] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0adeab0, ftCreationTime.dwHighDateTime=0x1d5ee56, ftLastAccessTime.dwLowDateTime=0xf514dae0, ftLastAccessTime.dwHighDateTime=0x1d5eae6, ftLastWriteTime.dwLowDateTime=0xf514dae0, ftLastWriteTime.dwHighDateTime=0x1d5eae6, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAa-reA-hk1ATTtVi.xlsx", cAlternateFileName="EAA-RE~1.XLS")) returned 1 [0132.927] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x843dc1d0, ftCreationTime.dwHighDateTime=0x1d5ed64, ftLastAccessTime.dwLowDateTime=0x6cf00470, ftLastAccessTime.dwHighDateTime=0x1d5f01b, ftLastWriteTime.dwLowDateTime=0x6cf00470, ftLastWriteTime.dwHighDateTime=0x1d5f01b, nFileSizeHigh=0x0, nFileSizeLow=0xbca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fBwSr AL8.swf", cAlternateFileName="FBWSRA~1.SWF")) returned 1 [0132.928] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f008740, ftCreationTime.dwHighDateTime=0x1d5ecba, ftLastAccessTime.dwLowDateTime=0xb5c9170, ftLastAccessTime.dwHighDateTime=0x1d5f119, ftLastWriteTime.dwLowDateTime=0xb5c9170, ftLastWriteTime.dwHighDateTime=0x1d5f119, nFileSizeHigh=0x0, nFileSizeLow=0xb16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="fXw5gy8AHox-E-T.mp4", cAlternateFileName="FXW5GY~1.MP4")) returned 1 [0132.928] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d42160, ftCreationTime.dwHighDateTime=0x1d5e436, ftLastAccessTime.dwLowDateTime=0x4d9805b0, ftLastAccessTime.dwHighDateTime=0x1d5ef48, ftLastWriteTime.dwLowDateTime=0x4d9805b0, ftLastWriteTime.dwHighDateTime=0x1d5ef48, nFileSizeHigh=0x0, nFileSizeLow=0xc704, dwReserved0=0x0, dwReserved1=0x0, cFileName="g1R1oG7uZJ RI9M6.pptx", cAlternateFileName="G1R1OG~1.PPT")) returned 1 [0132.928] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a512700, ftCreationTime.dwHighDateTime=0x1d5e136, ftLastAccessTime.dwLowDateTime=0x70edf210, ftLastAccessTime.dwHighDateTime=0x1d5eed3, ftLastWriteTime.dwLowDateTime=0x70edf210, ftLastWriteTime.dwHighDateTime=0x1d5eed3, nFileSizeHigh=0x0, nFileSizeLow=0xe3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDUQyoBXjiL2nP5.rtf", cAlternateFileName="GDUQYO~1.RTF")) returned 1 [0132.928] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc78900, ftCreationTime.dwHighDateTime=0x1d5e83c, ftLastAccessTime.dwLowDateTime=0x7e2a09c0, ftLastAccessTime.dwHighDateTime=0x1d5ef3f, ftLastWriteTime.dwLowDateTime=0x7e2a09c0, ftLastWriteTime.dwHighDateTime=0x1d5ef3f, nFileSizeHigh=0x0, nFileSizeLow=0x91a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="I6ZzNBLIR.m4a", cAlternateFileName="I6ZZNB~1.M4A")) returned 1 [0132.928] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898dab60, ftCreationTime.dwHighDateTime=0x1d5e11a, ftLastAccessTime.dwLowDateTime=0x67dac3f0, ftLastAccessTime.dwHighDateTime=0x1d5eeb1, ftLastWriteTime.dwLowDateTime=0x67dac3f0, ftLastWriteTime.dwHighDateTime=0x1d5eeb1, nFileSizeHigh=0x0, nFileSizeLow=0xdbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KrWLk_ktNYH.wav", cAlternateFileName="KRWLK_~1.WAV")) returned 1 [0132.928] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc90f00, ftCreationTime.dwHighDateTime=0x1d5ebec, ftLastAccessTime.dwLowDateTime=0xa0ac5ee0, ftLastAccessTime.dwHighDateTime=0x1d5f03d, ftLastWriteTime.dwLowDateTime=0xa0ac5ee0, ftLastWriteTime.dwHighDateTime=0x1d5f03d, nFileSizeHigh=0x0, nFileSizeLow=0xf918, dwReserved0=0x0, dwReserved1=0x0, cFileName="KzPHcaMzzPfVST6VDP.mp3", cAlternateFileName="KZPHCA~1.MP3")) returned 1 [0132.929] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1efcb720, ftCreationTime.dwHighDateTime=0x1d5e1e0, ftLastAccessTime.dwLowDateTime=0x1b748740, ftLastAccessTime.dwHighDateTime=0x1d5ec53, ftLastWriteTime.dwLowDateTime=0x1b748740, ftLastWriteTime.dwHighDateTime=0x1d5ec53, nFileSizeHigh=0x0, nFileSizeLow=0x52d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LhOK75rd2Dc PWsth is.gif", cAlternateFileName="LHOK75~1.GIF")) returned 1 [0132.929] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b0a40, ftCreationTime.dwHighDateTime=0x1d5eba8, ftLastAccessTime.dwLowDateTime=0x20f99a70, ftLastAccessTime.dwHighDateTime=0x1d5e0e1, ftLastWriteTime.dwLowDateTime=0x20f99a70, ftLastWriteTime.dwHighDateTime=0x1d5e0e1, nFileSizeHigh=0x0, nFileSizeLow=0x10540, dwReserved0=0x0, dwReserved1=0x0, cFileName="mE AgPmEdACD.csv", cAlternateFileName="MEAGPM~1.CSV")) returned 1 [0132.929] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5029fe0, ftCreationTime.dwHighDateTime=0x1d5e375, ftLastAccessTime.dwLowDateTime=0xec70c560, ftLastAccessTime.dwHighDateTime=0x1d5f06e, ftLastWriteTime.dwLowDateTime=0xec70c560, ftLastWriteTime.dwHighDateTime=0x1d5f06e, nFileSizeHigh=0x0, nFileSizeLow=0x136ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="mM2sOVkR DsjOD-r.avi", cAlternateFileName="MM2SOV~1.AVI")) returned 1 [0132.929] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d80c50, ftCreationTime.dwHighDateTime=0x1d5e61a, ftLastAccessTime.dwLowDateTime=0xdf2b2a20, ftLastAccessTime.dwHighDateTime=0x1d5ea57, ftLastWriteTime.dwLowDateTime=0xdf2b2a20, ftLastWriteTime.dwHighDateTime=0x1d5ea57, nFileSizeHigh=0x0, nFileSizeLow=0xe289, dwReserved0=0x0, dwReserved1=0x0, cFileName="oz1wxxjyP4gePV.jpg", cAlternateFileName="OZ1WXX~1.JPG")) returned 1 [0132.929] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e7544b0, ftCreationTime.dwHighDateTime=0x1d5e177, ftLastAccessTime.dwLowDateTime=0x1e9cbae0, ftLastAccessTime.dwHighDateTime=0x1d5e614, ftLastWriteTime.dwLowDateTime=0x1e9cbae0, ftLastWriteTime.dwHighDateTime=0x1d5e614, nFileSizeHigh=0x0, nFileSizeLow=0x11ae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="p eJEJwq7NKXrtf.gif", cAlternateFileName="PEJEJW~1.GIF")) returned 1 [0132.930] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x372e2fc0, ftCreationTime.dwHighDateTime=0x1d5e0d4, ftLastAccessTime.dwLowDateTime=0xf49434b0, ftLastAccessTime.dwHighDateTime=0x1d5e28c, ftLastWriteTime.dwLowDateTime=0xf49434b0, ftLastWriteTime.dwHighDateTime=0x1d5e28c, nFileSizeHigh=0x0, nFileSizeLow=0x6b72, dwReserved0=0x0, dwReserved1=0x0, cFileName="PpBwKL3XDYUwK.jpg", cAlternateFileName="PPBWKL~1.JPG")) returned 1 [0132.930] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428607c0, ftCreationTime.dwHighDateTime=0x1d5ebac, ftLastAccessTime.dwLowDateTime=0x195ea8a0, ftLastAccessTime.dwHighDateTime=0x1d5ed9d, ftLastWriteTime.dwLowDateTime=0x195ea8a0, ftLastWriteTime.dwHighDateTime=0x1d5ed9d, nFileSizeHigh=0x0, nFileSizeLow=0xf121, dwReserved0=0x0, dwReserved1=0x0, cFileName="RW7aBhlNHgJo15fCQo H.mkv", cAlternateFileName="RW7ABH~1.MKV")) returned 1 [0132.930] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2772e1e0, ftCreationTime.dwHighDateTime=0x1d5e7a8, ftLastAccessTime.dwLowDateTime=0xa1ffb2f0, ftLastAccessTime.dwHighDateTime=0x1d5eae4, ftLastWriteTime.dwLowDateTime=0xa1ffb2f0, ftLastWriteTime.dwHighDateTime=0x1d5eae4, nFileSizeHigh=0x0, nFileSizeLow=0x324e, dwReserved0=0x0, dwReserved1=0x0, cFileName="rzv5v-F9dqF6.mp3", cAlternateFileName="RZV5V-~1.MP3")) returned 1 [0132.930] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18a3deb0, ftCreationTime.dwHighDateTime=0x1d5ebdd, ftLastAccessTime.dwLowDateTime=0xa092b320, ftLastAccessTime.dwHighDateTime=0x1d5eece, ftLastWriteTime.dwLowDateTime=0xa092b320, ftLastWriteTime.dwHighDateTime=0x1d5eece, nFileSizeHigh=0x0, nFileSizeLow=0xf294, dwReserved0=0x0, dwReserved1=0x0, cFileName="SxjbHhg.mp3", cAlternateFileName="")) returned 1 [0132.930] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449158c0, ftCreationTime.dwHighDateTime=0x1d5e4b4, ftLastAccessTime.dwLowDateTime=0x7c082c0, ftLastAccessTime.dwHighDateTime=0x1d5e493, ftLastWriteTime.dwLowDateTime=0x7c082c0, ftLastWriteTime.dwHighDateTime=0x1d5e493, nFileSizeHigh=0x0, nFileSizeLow=0x149a, dwReserved0=0x0, dwReserved1=0x0, cFileName="tbQID kwf.xls", cAlternateFileName="TBQIDK~1.XLS")) returned 1 [0132.930] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4dbcdf0, ftCreationTime.dwHighDateTime=0x1d5e29f, ftLastAccessTime.dwLowDateTime=0xbcb4ab30, ftLastAccessTime.dwHighDateTime=0x1d5e8b1, ftLastWriteTime.dwLowDateTime=0xbcb4ab30, ftLastWriteTime.dwHighDateTime=0x1d5e8b1, nFileSizeHigh=0x0, nFileSizeLow=0x17bb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrRIe4oRo63pHb4u-V.rtf", cAlternateFileName="TRRIE4~1.RTF")) returned 1 [0132.939] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d74ba80, ftCreationTime.dwHighDateTime=0x1d5e605, ftLastAccessTime.dwLowDateTime=0x78ad5830, ftLastAccessTime.dwHighDateTime=0x1d5ec51, ftLastWriteTime.dwLowDateTime=0x78ad5830, ftLastWriteTime.dwHighDateTime=0x1d5ec51, nFileSizeHigh=0x0, nFileSizeLow=0xd32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="tT1Tx.docx", cAlternateFileName="TT1TX~1.DOC")) returned 1 [0132.939] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59827a80, ftCreationTime.dwHighDateTime=0x1d5e508, ftLastAccessTime.dwLowDateTime=0x5f3e4fd0, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x5f3e4fd0, ftLastWriteTime.dwHighDateTime=0x1d5e765, nFileSizeHigh=0x0, nFileSizeLow=0xa6f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="U-uxJFdWkC1M-wO6cUKB.bmp", cAlternateFileName="U-UXJF~1.BMP")) returned 1 [0132.940] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb9ff460, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x486509b0, ftLastAccessTime.dwHighDateTime=0x1d5e2ca, ftLastWriteTime.dwLowDateTime=0x486509b0, ftLastWriteTime.dwHighDateTime=0x1d5e2ca, nFileSizeHigh=0x0, nFileSizeLow=0x9708, dwReserved0=0x0, dwReserved1=0x0, cFileName="uO MS9hVAQqXyw.bmp", cAlternateFileName="UOMS9H~1.BMP")) returned 1 [0132.940] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5087a4f0, ftCreationTime.dwHighDateTime=0x1d5e88c, ftLastAccessTime.dwLowDateTime=0x9ca95370, ftLastAccessTime.dwHighDateTime=0x1d5ef5c, ftLastWriteTime.dwLowDateTime=0x9ca95370, ftLastWriteTime.dwHighDateTime=0x1d5ef5c, nFileSizeHigh=0x0, nFileSizeLow=0x16d2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="vZyE.png", cAlternateFileName="")) returned 1 [0132.940] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cc18ab0, ftCreationTime.dwHighDateTime=0x1d5e1fa, ftLastAccessTime.dwLowDateTime=0x8054b180, ftLastAccessTime.dwHighDateTime=0x1d5e113, ftLastWriteTime.dwLowDateTime=0x8054b180, ftLastWriteTime.dwHighDateTime=0x1d5e113, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xtTK", cAlternateFileName="")) returned 1 [0132.940] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85d0480, ftCreationTime.dwHighDateTime=0x1d5ee42, ftLastAccessTime.dwLowDateTime=0x878d6e60, ftLastAccessTime.dwHighDateTime=0x1d5e366, ftLastWriteTime.dwLowDateTime=0x878d6e60, ftLastWriteTime.dwHighDateTime=0x1d5e366, nFileSizeHigh=0x0, nFileSizeLow=0x3110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y58zNJtwG3kek2x.jpg", cAlternateFileName="Y58ZNJ~1.JPG")) returned 1 [0132.940] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77a3ca0, ftCreationTime.dwHighDateTime=0x1d5e222, ftLastAccessTime.dwLowDateTime=0xdaf5b270, ftLastAccessTime.dwHighDateTime=0x1d5e0c2, ftLastWriteTime.dwLowDateTime=0xdaf5b270, ftLastWriteTime.dwHighDateTime=0x1d5e0c2, nFileSizeHigh=0x0, nFileSizeLow=0x2aa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yawl.gif", cAlternateFileName="")) returned 1 [0132.940] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa10b9bf0, ftCreationTime.dwHighDateTime=0x1d5e302, ftLastAccessTime.dwLowDateTime=0x759682f0, ftLastAccessTime.dwHighDateTime=0x1d5e398, ftLastWriteTime.dwLowDateTime=0x759682f0, ftLastWriteTime.dwHighDateTime=0x1d5e398, nFileSizeHigh=0x0, nFileSizeLow=0x239d, dwReserved0=0x0, dwReserved1=0x0, cFileName="yved5LTWSIQ3yaO.avi", cAlternateFileName="YVED5L~1.AVI")) returned 1 [0132.940] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d102a60, ftCreationTime.dwHighDateTime=0x1d5e509, ftLastAccessTime.dwLowDateTime=0x8618f020, ftLastAccessTime.dwHighDateTime=0x1d5ee85, ftLastWriteTime.dwLowDateTime=0x8618f020, ftLastWriteTime.dwHighDateTime=0x1d5ee85, nFileSizeHigh=0x0, nFileSizeLow=0x512, dwReserved0=0x0, dwReserved1=0x0, cFileName="yWbI.mkv", cAlternateFileName="")) returned 1 [0132.941] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd94d1e0, ftCreationTime.dwHighDateTime=0x1d5ed46, ftLastAccessTime.dwLowDateTime=0x24b8260, ftLastAccessTime.dwHighDateTime=0x1d5e2a2, ftLastWriteTime.dwLowDateTime=0x24b8260, ftLastWriteTime.dwHighDateTime=0x1d5e2a2, nFileSizeHigh=0x0, nFileSizeLow=0x8b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="Z6uv3qRB.docx", cAlternateFileName="Z6UV3Q~1.DOC")) returned 1 [0132.941] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56f0a420, ftCreationTime.dwHighDateTime=0x1d5e49c, ftLastAccessTime.dwLowDateTime=0xde63bc50, ftLastAccessTime.dwHighDateTime=0x1d5f0b6, ftLastWriteTime.dwLowDateTime=0xde63bc50, ftLastWriteTime.dwHighDateTime=0x1d5f0b6, nFileSizeHigh=0x0, nFileSizeLow=0x13890, dwReserved0=0x0, dwReserved1=0x0, cFileName="_USg.png", cAlternateFileName="")) returned 1 [0132.941] FindNextFileW (in: hFindFile=0x581d270, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.941] FindClose (in: hFindFile=0x581d270 | out: hFindFile=0x581d270) returned 1 [0132.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0132.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0132.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png", lpFilePart=0x0) returned 0x2f [0132.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png" (normalized: "c:\\users\\fd1hvy\\desktop\\3v-vvdxrkr9vl9j3pcv.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0132.944] GetFileType (hFile=0x78c) returned 0x1 [0132.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.944] GetFileType (hFile=0x78c) returned 0x1 [0132.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png.P4WN3D", lpFilePart=0x0) returned 0x36 [0132.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0132.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\3v-vvdxrkr9vl9j3pcv.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0132.994] GetFileType (hFile=0x788) returned 0x1 [0132.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0132.994] GetFileType (hFile=0x788) returned 0x1 [0132.994] SetEndOfFile (hFile=0x788) returned 1 [0132.995] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x14386 [0132.995] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.996] WriteFile (in: hFile=0x788, lpBuffer=0x2c27dc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c27dc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.998] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.998] WriteFile (in: hFile=0x788, lpBuffer=0x2c28dcc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c28dcc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.998] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.999] WriteFile (in: hFile=0x788, lpBuffer=0x2c29dd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c29dd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.999] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0132.999] WriteFile (in: hFile=0x788, lpBuffer=0x2c2ade4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2ade4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0132.999] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.000] WriteFile (in: hFile=0x788, lpBuffer=0x2c2bdf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2bdf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.000] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.000] WriteFile (in: hFile=0x788, lpBuffer=0x2c2cdfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2cdfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.001] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.001] WriteFile (in: hFile=0x788, lpBuffer=0x2c2de08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2de08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.001] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.001] WriteFile (in: hFile=0x788, lpBuffer=0x2c2ee14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2ee14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.002] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.002] WriteFile (in: hFile=0x788, lpBuffer=0x2c2fe20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2fe20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.002] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.003] WriteFile (in: hFile=0x788, lpBuffer=0x2c30e2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c30e2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.003] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.003] WriteFile (in: hFile=0x788, lpBuffer=0x2c31e38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c31e38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.003] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.004] WriteFile (in: hFile=0x788, lpBuffer=0x2c32e44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c32e44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.004] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.004] WriteFile (in: hFile=0x788, lpBuffer=0x2c33e50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c33e50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.005] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.005] WriteFile (in: hFile=0x788, lpBuffer=0x2c34e5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c34e5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.005] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.005] WriteFile (in: hFile=0x788, lpBuffer=0x2c35e68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c35e68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.006] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.006] WriteFile (in: hFile=0x788, lpBuffer=0x2c36e74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c36e74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.006] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.006] WriteFile (in: hFile=0x788, lpBuffer=0x2c37e80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c37e80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.007] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.007] WriteFile (in: hFile=0x788, lpBuffer=0x2c38e8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c38e8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.007] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.008] WriteFile (in: hFile=0x788, lpBuffer=0x2c39e98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c39e98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.008] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.008] WriteFile (in: hFile=0x788, lpBuffer=0x2c3aea4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3aea4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.008] ReadFile (in: hFile=0x78c, lpBuffer=0x2c26970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c26970*, lpNumberOfBytesRead=0xb3f1fc*=0x386, lpOverlapped=0x0) returned 1 [0133.009] WriteFile (in: hFile=0x788, lpBuffer=0x2c3c23c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c3c23c*, lpNumberOfBytesWritten=0xb3f1b4*=0x390, lpOverlapped=0x0) returned 1 [0133.009] CloseHandle (hObject=0x788) returned 1 [0133.014] CloseHandle (hObject=0x78c) returned 1 [0133.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png", lpFilePart=0x0) returned 0x2f [0133.017] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\3V-VvdXRkr9VL9J3PcV.png" (normalized: "c:\\users\\fd1hvy\\desktop\\3v-vvdxrkr9vl9j3pcv.png")) returned 1 [0133.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx", lpFilePart=0x0) returned 0x2d [0133.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\g1r1og7uzj ri9m6.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0133.078] GetFileType (hFile=0x78c) returned 0x1 [0133.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.078] GetFileType (hFile=0x78c) returned 0x1 [0133.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx.P4WN3D", lpFilePart=0x0) returned 0x34 [0133.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.079] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\g1r1og7uzj ri9m6.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0133.080] GetFileType (hFile=0x788) returned 0x1 [0133.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.080] GetFileType (hFile=0x788) returned 0x1 [0133.080] SetEndOfFile (hFile=0x788) returned 1 [0133.080] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xc704 [0133.080] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.081] WriteFile (in: hFile=0x788, lpBuffer=0x2c3f444*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3f444*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.083] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.083] WriteFile (in: hFile=0x788, lpBuffer=0x2c40450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c40450*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.083] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.084] WriteFile (in: hFile=0x788, lpBuffer=0x2c4145c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4145c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.084] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.084] WriteFile (in: hFile=0x788, lpBuffer=0x2c42468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c42468*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.085] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.085] WriteFile (in: hFile=0x788, lpBuffer=0x2c43474*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c43474*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.085] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.085] WriteFile (in: hFile=0x788, lpBuffer=0x2c44480*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c44480*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.086] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.086] WriteFile (in: hFile=0x788, lpBuffer=0x2c4548c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4548c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.086] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.086] WriteFile (in: hFile=0x788, lpBuffer=0x2c46498*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c46498*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.087] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.197] WriteFile (in: hFile=0x788, lpBuffer=0x2c474a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c474a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.198] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.198] WriteFile (in: hFile=0x788, lpBuffer=0x2c484b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c484b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.198] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.199] WriteFile (in: hFile=0x788, lpBuffer=0x2c494bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c494bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.199] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.199] WriteFile (in: hFile=0x788, lpBuffer=0x2c4a4c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4a4c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.199] ReadFile (in: hFile=0x78c, lpBuffer=0x2c3dff4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c3dff4*, lpNumberOfBytesRead=0xb3f1fc*=0x704, lpOverlapped=0x0) returned 1 [0133.200] WriteFile (in: hFile=0x788, lpBuffer=0x2c4bbe0*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c4bbe0*, lpNumberOfBytesWritten=0xb3f1b4*=0x710, lpOverlapped=0x0) returned 1 [0133.200] CloseHandle (hObject=0x788) returned 1 [0133.205] CloseHandle (hObject=0x78c) returned 1 [0133.208] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx", lpFilePart=0x0) returned 0x2d [0133.208] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\g1R1oG7uZJ RI9M6.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\g1r1og7uzj ri9m6.pptx")) returned 1 [0133.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif", lpFilePart=0x0) returned 0x30 [0133.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.297] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\lhok75rd2dc pwsth is.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0133.298] GetFileType (hFile=0x78c) returned 0x1 [0133.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.298] GetFileType (hFile=0x78c) returned 0x1 [0133.298] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif.P4WN3D", lpFilePart=0x0) returned 0x37 [0133.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.298] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\lhok75rd2dc pwsth is.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0133.299] GetFileType (hFile=0x788) returned 0x1 [0133.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.299] GetFileType (hFile=0x788) returned 0x1 [0133.299] SetEndOfFile (hFile=0x788) returned 1 [0133.299] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x52d6 [0133.299] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4d9ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4d9ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.301] WriteFile (in: hFile=0x788, lpBuffer=0x2c4edfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4edfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.302] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4d9ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4d9ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.302] WriteFile (in: hFile=0x788, lpBuffer=0x2c4fe08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4fe08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.303] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4d9ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4d9ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.303] WriteFile (in: hFile=0x788, lpBuffer=0x2c50e14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c50e14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.303] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4d9ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4d9ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.304] WriteFile (in: hFile=0x788, lpBuffer=0x2c51e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c51e20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.304] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4d9ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4d9ac*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.304] WriteFile (in: hFile=0x788, lpBuffer=0x2c52e2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c52e2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.304] ReadFile (in: hFile=0x78c, lpBuffer=0x2c4d9ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c4d9ac*, lpNumberOfBytesRead=0xb3f1fc*=0x2d6, lpOverlapped=0x0) returned 1 [0133.305] WriteFile (in: hFile=0x788, lpBuffer=0x2c54114*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c54114*, lpNumberOfBytesWritten=0xb3f1b4*=0x2e0, lpOverlapped=0x0) returned 1 [0133.305] CloseHandle (hObject=0x788) returned 1 [0133.308] CloseHandle (hObject=0x78c) returned 1 [0133.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif", lpFilePart=0x0) returned 0x30 [0133.311] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LhOK75rd2Dc PWsth is.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\lhok75rd2dc pwsth is.gif")) returned 1 [0133.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg", lpFilePart=0x0) returned 0x2a [0133.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\oz1wxxjyp4gepv.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0133.374] GetFileType (hFile=0x78c) returned 0x1 [0133.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.374] GetFileType (hFile=0x78c) returned 0x1 [0133.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg.P4WN3D", lpFilePart=0x0) returned 0x31 [0133.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\oz1wxxjyp4gepv.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0133.375] GetFileType (hFile=0x788) returned 0x1 [0133.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.375] GetFileType (hFile=0x788) returned 0x1 [0133.375] SetEndOfFile (hFile=0x788) returned 1 [0133.376] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xe289 [0133.376] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.377] WriteFile (in: hFile=0x788, lpBuffer=0x2c57304*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c57304*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.379] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.379] WriteFile (in: hFile=0x788, lpBuffer=0x2c58310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c58310*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.379] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.379] WriteFile (in: hFile=0x788, lpBuffer=0x2c5931c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5931c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.380] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.380] WriteFile (in: hFile=0x788, lpBuffer=0x2c5a328*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5a328*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.380] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.381] WriteFile (in: hFile=0x788, lpBuffer=0x2c5b334*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5b334*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.381] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.381] WriteFile (in: hFile=0x788, lpBuffer=0x2c5c340*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5c340*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.381] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.382] WriteFile (in: hFile=0x788, lpBuffer=0x2c5d34c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5d34c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.382] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.382] WriteFile (in: hFile=0x788, lpBuffer=0x2c5e358*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5e358*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.383] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.383] WriteFile (in: hFile=0x788, lpBuffer=0x2c5f364*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5f364*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.383] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.383] WriteFile (in: hFile=0x788, lpBuffer=0x2c60370*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c60370*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.384] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.384] WriteFile (in: hFile=0x788, lpBuffer=0x2c6137c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c6137c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.385] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.385] WriteFile (in: hFile=0x788, lpBuffer=0x2c62388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c62388*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.385] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.385] WriteFile (in: hFile=0x788, lpBuffer=0x2c63394*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c63394*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.386] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.386] WriteFile (in: hFile=0x788, lpBuffer=0x2c643a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c643a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.386] ReadFile (in: hFile=0x78c, lpBuffer=0x2c55eb4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c55eb4*, lpNumberOfBytesRead=0xb3f1fc*=0x289, lpOverlapped=0x0) returned 1 [0133.387] WriteFile (in: hFile=0x788, lpBuffer=0x2c65638*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c65638*, lpNumberOfBytesWritten=0xb3f1b4*=0x290, lpOverlapped=0x0) returned 1 [0133.387] CloseHandle (hObject=0x788) returned 1 [0133.397] CloseHandle (hObject=0x78c) returned 1 [0133.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg", lpFilePart=0x0) returned 0x2a [0133.399] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\oz1wxxjyP4gePV.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\oz1wxxjyp4gepv.jpg")) returned 1 [0133.499] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif", lpFilePart=0x0) returned 0x2b [0133.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\p ejejwq7nkxrtf.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0133.500] GetFileType (hFile=0x78c) returned 0x1 [0133.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.500] GetFileType (hFile=0x78c) returned 0x1 [0133.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif.P4WN3D", lpFilePart=0x0) returned 0x32 [0133.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.500] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\p ejejwq7nkxrtf.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0133.500] GetFileType (hFile=0x788) returned 0x1 [0133.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.501] GetFileType (hFile=0x788) returned 0x1 [0133.501] SetEndOfFile (hFile=0x788) returned 1 [0133.501] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x11ae6 [0133.505] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.506] WriteFile (in: hFile=0x788, lpBuffer=0x2a6a164*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6a164*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.508] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.508] WriteFile (in: hFile=0x788, lpBuffer=0x2a6b170*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6b170*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.508] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.509] WriteFile (in: hFile=0x788, lpBuffer=0x2a6c17c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6c17c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.666] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.667] WriteFile (in: hFile=0x788, lpBuffer=0x2a6d188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6d188*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.667] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.667] WriteFile (in: hFile=0x788, lpBuffer=0x2a6e194*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6e194*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.667] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.668] WriteFile (in: hFile=0x788, lpBuffer=0x2a6f1a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a6f1a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.668] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.668] WriteFile (in: hFile=0x788, lpBuffer=0x2a701ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a701ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.668] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.669] WriteFile (in: hFile=0x788, lpBuffer=0x2a711b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a711b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.669] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.669] WriteFile (in: hFile=0x788, lpBuffer=0x2a721c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a721c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.669] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.669] WriteFile (in: hFile=0x788, lpBuffer=0x2a731d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a731d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.669] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.670] WriteFile (in: hFile=0x788, lpBuffer=0x2a741dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a741dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.670] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.670] WriteFile (in: hFile=0x788, lpBuffer=0x2a751e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a751e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.670] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.671] WriteFile (in: hFile=0x788, lpBuffer=0x2a761f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a761f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.671] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.671] WriteFile (in: hFile=0x788, lpBuffer=0x2a77200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a77200*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.671] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.672] WriteFile (in: hFile=0x788, lpBuffer=0x2a7820c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7820c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.672] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.672] WriteFile (in: hFile=0x788, lpBuffer=0x2a79218*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a79218*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.673] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.673] WriteFile (in: hFile=0x788, lpBuffer=0x2a7a224*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7a224*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.673] ReadFile (in: hFile=0x78c, lpBuffer=0x2a68d14, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a68d14*, lpNumberOfBytesRead=0xb3f1fc*=0xae6, lpOverlapped=0x0) returned 1 [0133.673] WriteFile (in: hFile=0x788, lpBuffer=0x2a7bd1c*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a7bd1c*, lpNumberOfBytesWritten=0xb3f1b4*=0xaf0, lpOverlapped=0x0) returned 1 [0133.674] CloseHandle (hObject=0x788) returned 1 [0133.687] CloseHandle (hObject=0x78c) returned 1 [0133.690] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif", lpFilePart=0x0) returned 0x2b [0133.690] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\p eJEJwq7NKXrtf.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\p ejejwq7nkxrtf.gif")) returned 1 [0133.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg", lpFilePart=0x0) returned 0x29 [0133.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\ppbwkl3xdyuwk.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0133.901] GetFileType (hFile=0x78c) returned 0x1 [0133.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.901] GetFileType (hFile=0x78c) returned 0x1 [0133.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg.P4WN3D", lpFilePart=0x0) returned 0x30 [0133.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0133.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\ppbwkl3xdyuwk.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0133.902] GetFileType (hFile=0x788) returned 0x1 [0133.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0133.902] GetFileType (hFile=0x788) returned 0x1 [0133.903] SetEndOfFile (hFile=0x788) returned 1 [0133.903] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x6b72 [0133.903] ReadFile (in: hFile=0x78c, lpBuffer=0x2a7da9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a7da9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.904] WriteFile (in: hFile=0x788, lpBuffer=0x2a7eeec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7eeec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0133.906] ReadFile (in: hFile=0x78c, lpBuffer=0x2a7da9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a7da9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0133.906] WriteFile (in: hFile=0x788, lpBuffer=0x2a7fef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7fef8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.016] ReadFile (in: hFile=0x78c, lpBuffer=0x2a7da9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a7da9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.016] WriteFile (in: hFile=0x788, lpBuffer=0x2a80f04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a80f04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.017] ReadFile (in: hFile=0x78c, lpBuffer=0x2a7da9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a7da9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.017] WriteFile (in: hFile=0x788, lpBuffer=0x2a81f10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a81f10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.017] ReadFile (in: hFile=0x78c, lpBuffer=0x2a7da9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a7da9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.018] WriteFile (in: hFile=0x788, lpBuffer=0x2a82f1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a82f1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.018] ReadFile (in: hFile=0x78c, lpBuffer=0x2a7da9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a7da9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.018] WriteFile (in: hFile=0x788, lpBuffer=0x2a83f28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a83f28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.019] ReadFile (in: hFile=0x78c, lpBuffer=0x2a7da9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a7da9c*, lpNumberOfBytesRead=0xb3f1fc*=0xb72, lpOverlapped=0x0) returned 1 [0134.019] WriteFile (in: hFile=0x788, lpBuffer=0x2a85ab0*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a85ab0*, lpNumberOfBytesWritten=0xb3f1b4*=0xb80, lpOverlapped=0x0) returned 1 [0134.019] CloseHandle (hObject=0x788) returned 1 [0134.026] CloseHandle (hObject=0x78c) returned 1 [0134.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg", lpFilePart=0x0) returned 0x29 [0134.036] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\PpBwKL3XDYUwK.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\ppbwkl3xdyuwk.jpg")) returned 1 [0134.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls", lpFilePart=0x0) returned 0x25 [0134.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0134.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\tbqid kwf.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0134.193] GetFileType (hFile=0x78c) returned 0x1 [0134.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0134.193] GetFileType (hFile=0x78c) returned 0x1 [0134.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls.P4WN3D", lpFilePart=0x0) returned 0x2c [0134.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0134.193] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\tbqid kwf.xls.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0134.193] GetFileType (hFile=0x788) returned 0x1 [0134.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0134.193] GetFileType (hFile=0x788) returned 0x1 [0134.193] SetEndOfFile (hFile=0x788) returned 1 [0134.194] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x149a [0134.194] ReadFile (in: hFile=0x78c, lpBuffer=0x2a87804, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a87804*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.195] WriteFile (in: hFile=0x788, lpBuffer=0x2a88c54*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a88c54*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.196] ReadFile (in: hFile=0x78c, lpBuffer=0x2a87804, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a87804*, lpNumberOfBytesRead=0xb3f1fc*=0x49a, lpOverlapped=0x0) returned 1 [0134.197] WriteFile (in: hFile=0x788, lpBuffer=0x2a8a0fc*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a8a0fc*, lpNumberOfBytesWritten=0xb3f1b4*=0x4a0, lpOverlapped=0x0) returned 1 [0134.197] CloseHandle (hObject=0x788) returned 1 [0134.201] CloseHandle (hObject=0x78c) returned 1 [0134.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls", lpFilePart=0x0) returned 0x25 [0134.252] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\tbQID kwf.xls" (normalized: "c:\\users\\fd1hvy\\desktop\\tbqid kwf.xls")) returned 1 [0134.318] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx", lpFilePart=0x0) returned 0x22 [0134.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0134.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\tt1tx.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0134.318] GetFileType (hFile=0x78c) returned 0x1 [0134.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0134.318] GetFileType (hFile=0x78c) returned 0x1 [0134.318] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx.P4WN3D", lpFilePart=0x0) returned 0x29 [0134.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0134.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\tt1tx.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0134.319] GetFileType (hFile=0x788) returned 0x1 [0134.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0134.319] GetFileType (hFile=0x788) returned 0x1 [0134.319] SetEndOfFile (hFile=0x788) returned 1 [0134.319] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xd32e [0134.320] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.321] WriteFile (in: hFile=0x788, lpBuffer=0x2a8d268*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8d268*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.322] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.322] WriteFile (in: hFile=0x788, lpBuffer=0x2a8e274*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8e274*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.323] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.323] WriteFile (in: hFile=0x788, lpBuffer=0x2a8f280*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8f280*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.323] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.324] WriteFile (in: hFile=0x788, lpBuffer=0x2a9028c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9028c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.324] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.324] WriteFile (in: hFile=0x788, lpBuffer=0x2a91298*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a91298*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.324] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.325] WriteFile (in: hFile=0x788, lpBuffer=0x2a922a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a922a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.325] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.325] WriteFile (in: hFile=0x788, lpBuffer=0x2a932b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a932b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.326] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.326] WriteFile (in: hFile=0x788, lpBuffer=0x2a942bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a942bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.326] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.326] WriteFile (in: hFile=0x788, lpBuffer=0x2a952c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a952c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.327] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.327] WriteFile (in: hFile=0x788, lpBuffer=0x2a962d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a962d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.327] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.328] WriteFile (in: hFile=0x788, lpBuffer=0x2a972e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a972e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.328] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.328] WriteFile (in: hFile=0x788, lpBuffer=0x2a982ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a982ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.329] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.329] WriteFile (in: hFile=0x788, lpBuffer=0x2a992f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a992f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.329] ReadFile (in: hFile=0x78c, lpBuffer=0x2a8be18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a8be18*, lpNumberOfBytesRead=0xb3f1fc*=0x32e, lpOverlapped=0x0) returned 1 [0134.330] WriteFile (in: hFile=0x788, lpBuffer=0x2a9a630*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a9a630*, lpNumberOfBytesWritten=0xb3f1b4*=0x330, lpOverlapped=0x0) returned 1 [0134.330] CloseHandle (hObject=0x788) returned 1 [0134.333] CloseHandle (hObject=0x78c) returned 1 [0134.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx", lpFilePart=0x0) returned 0x22 [0134.335] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\tT1Tx.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\tt1tx.docx")) returned 1 [0134.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp", lpFilePart=0x0) returned 0x30 [0134.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0134.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\u-uxjfdwkc1m-wo6cukb.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0134.449] GetFileType (hFile=0x78c) returned 0x1 [0134.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0134.450] GetFileType (hFile=0x78c) returned 0x1 [0134.450] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp.P4WN3D", lpFilePart=0x0) returned 0x37 [0134.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0134.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\u-uxjfdwkc1m-wo6cukb.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0134.502] GetFileType (hFile=0x788) returned 0x1 [0134.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0134.502] GetFileType (hFile=0x788) returned 0x1 [0134.503] SetEndOfFile (hFile=0x788) returned 1 [0134.797] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xa6f6 [0134.797] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.799] WriteFile (in: hFile=0x788, lpBuffer=0x2a9d81c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9d81c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.801] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.801] WriteFile (in: hFile=0x788, lpBuffer=0x2a9e828*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9e828*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.801] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.802] WriteFile (in: hFile=0x788, lpBuffer=0x2a9f834*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9f834*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.802] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.802] WriteFile (in: hFile=0x788, lpBuffer=0x2aa0840*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa0840*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.802] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.802] WriteFile (in: hFile=0x788, lpBuffer=0x2aa184c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa184c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.803] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.803] WriteFile (in: hFile=0x788, lpBuffer=0x2aa2858*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa2858*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.803] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.803] WriteFile (in: hFile=0x788, lpBuffer=0x2aa3864*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa3864*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.804] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.804] WriteFile (in: hFile=0x788, lpBuffer=0x2aa4870*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa4870*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.804] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.805] WriteFile (in: hFile=0x788, lpBuffer=0x2aa587c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa587c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.805] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0134.805] WriteFile (in: hFile=0x788, lpBuffer=0x2aa6888*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6888*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0134.805] ReadFile (in: hFile=0x78c, lpBuffer=0x2a9c3cc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a9c3cc*, lpNumberOfBytesRead=0xb3f1fc*=0x6f6, lpOverlapped=0x0) returned 1 [0134.806] WriteFile (in: hFile=0x788, lpBuffer=0x2aa7f90*, nNumberOfBytesToWrite=0x700, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2aa7f90*, lpNumberOfBytesWritten=0xb3f1b4*=0x700, lpOverlapped=0x0) returned 1 [0134.806] CloseHandle (hObject=0x788) returned 1 [0134.859] CloseHandle (hObject=0x78c) returned 1 [0134.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp", lpFilePart=0x0) returned 0x30 [0134.862] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\U-uxJFdWkC1M-wO6cUKB.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\u-uxjfdwkc1m-wo6cukb.bmp")) returned 1 [0134.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp", lpFilePart=0x0) returned 0x2a [0134.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0134.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\uo ms9hvaqqxyw.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0134.909] GetFileType (hFile=0x78c) returned 0x1 [0134.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0134.909] GetFileType (hFile=0x78c) returned 0x1 [0134.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp.P4WN3D", lpFilePart=0x0) returned 0x31 [0134.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0134.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\uo ms9hvaqqxyw.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0134.953] GetFileType (hFile=0x788) returned 0x1 [0134.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0134.953] GetFileType (hFile=0x788) returned 0x1 [0134.953] SetEndOfFile (hFile=0x788) returned 1 [0135.172] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x9708 [0135.173] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.174] WriteFile (in: hFile=0x788, lpBuffer=0x2aab180*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aab180*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.176] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.176] WriteFile (in: hFile=0x788, lpBuffer=0x2aac18c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aac18c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.176] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.177] WriteFile (in: hFile=0x788, lpBuffer=0x2aad198*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aad198*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.177] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.177] WriteFile (in: hFile=0x788, lpBuffer=0x2aae1a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aae1a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.177] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.178] WriteFile (in: hFile=0x788, lpBuffer=0x2aaf1b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aaf1b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.178] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.178] WriteFile (in: hFile=0x788, lpBuffer=0x2ab01bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab01bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.179] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.179] WriteFile (in: hFile=0x788, lpBuffer=0x2ab11c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab11c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.179] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.180] WriteFile (in: hFile=0x788, lpBuffer=0x2ab21d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab21d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.180] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.180] WriteFile (in: hFile=0x788, lpBuffer=0x2ab31e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab31e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.180] ReadFile (in: hFile=0x78c, lpBuffer=0x2aa9d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2aa9d30*, lpNumberOfBytesRead=0xb3f1fc*=0x708, lpOverlapped=0x0) returned 1 [0135.181] WriteFile (in: hFile=0x788, lpBuffer=0x2ab48f8*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ab48f8*, lpNumberOfBytesWritten=0xb3f1b4*=0x710, lpOverlapped=0x0) returned 1 [0135.181] CloseHandle (hObject=0x788) returned 1 [0135.235] CloseHandle (hObject=0x78c) returned 1 [0135.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp", lpFilePart=0x0) returned 0x2a [0135.237] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\uO MS9hVAQqXyw.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\uo ms9hvaqqxyw.bmp")) returned 1 [0135.242] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\vZyE.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\vZyE.png", lpFilePart=0x0) returned 0x20 [0135.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0135.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\vZyE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vzye.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0135.243] GetFileType (hFile=0x78c) returned 0x1 [0135.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0135.243] GetFileType (hFile=0x78c) returned 0x1 [0135.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\vZyE.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\vZyE.png.P4WN3D", lpFilePart=0x0) returned 0x27 [0135.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0135.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\vZyE.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\vzye.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0135.244] GetFileType (hFile=0x788) returned 0x1 [0135.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0135.244] GetFileType (hFile=0x788) returned 0x1 [0135.244] SetEndOfFile (hFile=0x788) returned 1 [0135.244] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x16d2c [0135.244] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.246] WriteFile (in: hFile=0x788, lpBuffer=0x2ab7a68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab7a68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.247] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.250] WriteFile (in: hFile=0x788, lpBuffer=0x2ab8a74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab8a74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.250] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.250] WriteFile (in: hFile=0x788, lpBuffer=0x2ab9a80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab9a80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.251] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.251] WriteFile (in: hFile=0x788, lpBuffer=0x2abaa8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abaa8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.251] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.252] WriteFile (in: hFile=0x788, lpBuffer=0x2abba98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abba98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.252] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.252] WriteFile (in: hFile=0x788, lpBuffer=0x2abcaa4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abcaa4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.253] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.253] WriteFile (in: hFile=0x788, lpBuffer=0x2abdab0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abdab0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.253] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.253] WriteFile (in: hFile=0x788, lpBuffer=0x2abeabc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abeabc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.254] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.254] WriteFile (in: hFile=0x788, lpBuffer=0x2abfac8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abfac8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.254] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.255] WriteFile (in: hFile=0x788, lpBuffer=0x2ac0ad4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac0ad4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.255] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.255] WriteFile (in: hFile=0x788, lpBuffer=0x2ac1ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac1ae0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.255] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.256] WriteFile (in: hFile=0x788, lpBuffer=0x2ac2aec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac2aec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.256] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.256] WriteFile (in: hFile=0x788, lpBuffer=0x2ac3af8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac3af8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.257] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.257] WriteFile (in: hFile=0x788, lpBuffer=0x2ac4b04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac4b04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.257] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.257] WriteFile (in: hFile=0x788, lpBuffer=0x2ac5b10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac5b10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.258] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.258] WriteFile (in: hFile=0x788, lpBuffer=0x2ac6b1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac6b1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.258] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.258] WriteFile (in: hFile=0x788, lpBuffer=0x2ac7b28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac7b28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.259] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.259] WriteFile (in: hFile=0x788, lpBuffer=0x2ac8b34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac8b34*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.259] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.260] WriteFile (in: hFile=0x788, lpBuffer=0x2ac9b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac9b40*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.260] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.260] WriteFile (in: hFile=0x788, lpBuffer=0x2acab4c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acab4c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.261] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.261] WriteFile (in: hFile=0x788, lpBuffer=0x2acbb58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acbb58*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.261] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.262] WriteFile (in: hFile=0x788, lpBuffer=0x2accb64*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2accb64*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.262] ReadFile (in: hFile=0x78c, lpBuffer=0x2ab6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ab6618*, lpNumberOfBytesRead=0xb3f1fc*=0xd2c, lpOverlapped=0x0) returned 1 [0135.262] WriteFile (in: hFile=0x788, lpBuffer=0x2ace89c*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ace89c*, lpNumberOfBytesWritten=0xb3f1b4*=0xd30, lpOverlapped=0x0) returned 1 [0135.262] CloseHandle (hObject=0x788) returned 1 [0135.313] CloseHandle (hObject=0x78c) returned 1 [0135.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\vZyE.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\vZyE.png", lpFilePart=0x0) returned 0x20 [0135.315] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\vZyE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\vzye.png")) returned 1 [0135.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg", lpFilePart=0x0) returned 0x2b [0135.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0135.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\y58znjtwg3kek2x.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0135.367] GetFileType (hFile=0x78c) returned 0x1 [0135.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0135.367] GetFileType (hFile=0x78c) returned 0x1 [0135.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg.P4WN3D", lpFilePart=0x0) returned 0x32 [0135.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0135.368] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\y58znjtwg3kek2x.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0135.368] GetFileType (hFile=0x788) returned 0x1 [0135.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0135.368] GetFileType (hFile=0x788) returned 0x1 [0135.368] SetEndOfFile (hFile=0x788) returned 1 [0135.369] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x3110 [0135.369] ReadFile (in: hFile=0x78c, lpBuffer=0x2ad0600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ad0600*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.370] WriteFile (in: hFile=0x788, lpBuffer=0x2ad1a50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad1a50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.372] ReadFile (in: hFile=0x78c, lpBuffer=0x2ad0600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ad0600*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.372] WriteFile (in: hFile=0x788, lpBuffer=0x2ad2a5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad2a5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.373] ReadFile (in: hFile=0x78c, lpBuffer=0x2ad0600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ad0600*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.373] WriteFile (in: hFile=0x788, lpBuffer=0x2ad3a68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad3a68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.373] ReadFile (in: hFile=0x78c, lpBuffer=0x2ad0600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ad0600*, lpNumberOfBytesRead=0xb3f1fc*=0x110, lpOverlapped=0x0) returned 1 [0135.373] WriteFile (in: hFile=0x788, lpBuffer=0x2ad4b90*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ad4b90*, lpNumberOfBytesWritten=0xb3f1b4*=0x120, lpOverlapped=0x0) returned 1 [0135.374] CloseHandle (hObject=0x788) returned 1 [0135.381] CloseHandle (hObject=0x78c) returned 1 [0135.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg", lpFilePart=0x0) returned 0x2b [0135.384] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Y58zNJtwG3kek2x.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\y58znjtwg3kek2x.jpg")) returned 1 [0135.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif", lpFilePart=0x0) returned 0x20 [0135.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0135.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\yawl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0135.428] GetFileType (hFile=0x78c) returned 0x1 [0135.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0135.428] GetFileType (hFile=0x78c) returned 0x1 [0135.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif.P4WN3D", lpFilePart=0x0) returned 0x27 [0135.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0135.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\yawl.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0135.429] GetFileType (hFile=0x788) returned 0x1 [0135.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0135.429] GetFileType (hFile=0x788) returned 0x1 [0135.429] SetEndOfFile (hFile=0x788) returned 1 [0135.429] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x2aa3 [0135.430] ReadFile (in: hFile=0x78c, lpBuffer=0x2ad68b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ad68b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.431] WriteFile (in: hFile=0x788, lpBuffer=0x2ad7d08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad7d08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.433] ReadFile (in: hFile=0x78c, lpBuffer=0x2ad68b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ad68b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.433] WriteFile (in: hFile=0x788, lpBuffer=0x2ad8d14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad8d14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.434] ReadFile (in: hFile=0x78c, lpBuffer=0x2ad68b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ad68b8*, lpNumberOfBytesRead=0xb3f1fc*=0xaa3, lpOverlapped=0x0) returned 1 [0135.434] WriteFile (in: hFile=0x788, lpBuffer=0x2ada7cc*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ada7cc*, lpNumberOfBytesWritten=0xb3f1b4*=0xab0, lpOverlapped=0x0) returned 1 [0135.434] CloseHandle (hObject=0x788) returned 1 [0135.436] CloseHandle (hObject=0x78c) returned 1 [0135.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif", lpFilePart=0x0) returned 0x20 [0135.487] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Yawl.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\yawl.gif")) returned 1 [0135.535] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx", lpFilePart=0x0) returned 0x25 [0135.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0135.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\z6uv3qrb.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0135.536] GetFileType (hFile=0x78c) returned 0x1 [0135.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0135.536] GetFileType (hFile=0x78c) returned 0x1 [0135.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx.P4WN3D", lpFilePart=0x0) returned 0x2c [0135.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0135.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\z6uv3qrb.docx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0135.537] GetFileType (hFile=0x788) returned 0x1 [0135.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0135.537] GetFileType (hFile=0x788) returned 0x1 [0135.537] SetEndOfFile (hFile=0x788) returned 1 [0135.537] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x8b52 [0135.537] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.538] WriteFile (in: hFile=0x788, lpBuffer=0x2add950*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2add950*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.540] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.540] WriteFile (in: hFile=0x788, lpBuffer=0x2ade95c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ade95c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.540] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.541] WriteFile (in: hFile=0x788, lpBuffer=0x2adf968*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2adf968*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.541] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.541] WriteFile (in: hFile=0x788, lpBuffer=0x2ae0974*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae0974*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.542] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.542] WriteFile (in: hFile=0x788, lpBuffer=0x2ae1980*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae1980*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.542] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.543] WriteFile (in: hFile=0x788, lpBuffer=0x2ae298c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae298c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.543] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.543] WriteFile (in: hFile=0x788, lpBuffer=0x2ae3998*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae3998*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.543] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0135.544] WriteFile (in: hFile=0x788, lpBuffer=0x2ae49a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae49a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0135.544] ReadFile (in: hFile=0x78c, lpBuffer=0x2adc500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2adc500*, lpNumberOfBytesRead=0xb3f1fc*=0xb52, lpOverlapped=0x0) returned 1 [0135.545] WriteFile (in: hFile=0x788, lpBuffer=0x2ae650c*, nNumberOfBytesToWrite=0xb60, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ae650c*, lpNumberOfBytesWritten=0xb3f1b4*=0xb60, lpOverlapped=0x0) returned 1 [0135.546] CloseHandle (hObject=0x788) returned 1 [0135.549] CloseHandle (hObject=0x78c) returned 1 [0135.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx", lpFilePart=0x0) returned 0x25 [0135.551] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Z6uv3qRB.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\z6uv3qrb.docx")) returned 1 [0136.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\_USg.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\_USg.png", lpFilePart=0x0) returned 0x20 [0136.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0136.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_USg.png" (normalized: "c:\\users\\fd1hvy\\desktop\\_usg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0136.019] GetFileType (hFile=0x78c) returned 0x1 [0136.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0136.019] GetFileType (hFile=0x78c) returned 0x1 [0136.019] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\_USg.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\_USg.png.P4WN3D", lpFilePart=0x0) returned 0x27 [0136.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0136.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_USg.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\_usg.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0136.020] GetFileType (hFile=0x788) returned 0x1 [0136.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0136.020] GetFileType (hFile=0x788) returned 0x1 [0136.020] SetEndOfFile (hFile=0x788) returned 1 [0136.020] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x13890 [0136.021] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.022] WriteFile (in: hFile=0x788, lpBuffer=0x2ae966c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae966c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.023] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.024] WriteFile (in: hFile=0x788, lpBuffer=0x2aea678*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aea678*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.024] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.024] WriteFile (in: hFile=0x788, lpBuffer=0x2aeb684*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aeb684*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.025] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.025] WriteFile (in: hFile=0x788, lpBuffer=0x2aec690*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aec690*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.025] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.026] WriteFile (in: hFile=0x788, lpBuffer=0x2aed69c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aed69c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.026] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.026] WriteFile (in: hFile=0x788, lpBuffer=0x2aee6a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aee6a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.026] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.027] WriteFile (in: hFile=0x788, lpBuffer=0x2aef6b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aef6b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.027] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.027] WriteFile (in: hFile=0x788, lpBuffer=0x2af06c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af06c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.027] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.028] WriteFile (in: hFile=0x788, lpBuffer=0x2af16cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af16cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.028] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.028] WriteFile (in: hFile=0x788, lpBuffer=0x2af26d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af26d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.028] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.029] WriteFile (in: hFile=0x788, lpBuffer=0x2af36e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af36e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.029] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.029] WriteFile (in: hFile=0x788, lpBuffer=0x2af46f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af46f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.029] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.030] WriteFile (in: hFile=0x788, lpBuffer=0x2af56fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af56fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.030] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.030] WriteFile (in: hFile=0x788, lpBuffer=0x2af6708*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af6708*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.031] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.147] WriteFile (in: hFile=0x788, lpBuffer=0x2af7714*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af7714*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.148] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.149] WriteFile (in: hFile=0x788, lpBuffer=0x2af8720*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af8720*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.149] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.149] WriteFile (in: hFile=0x788, lpBuffer=0x2af972c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af972c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.150] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.150] WriteFile (in: hFile=0x788, lpBuffer=0x2afa738*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afa738*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.151] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.151] WriteFile (in: hFile=0x788, lpBuffer=0x2afb744*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afb744*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.151] ReadFile (in: hFile=0x78c, lpBuffer=0x2ae821c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2ae821c*, lpNumberOfBytesRead=0xb3f1fc*=0x890, lpOverlapped=0x0) returned 1 [0136.151] WriteFile (in: hFile=0x788, lpBuffer=0x2afcfec*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2afcfec*, lpNumberOfBytesWritten=0xb3f1b4*=0x8a0, lpOverlapped=0x0) returned 1 [0136.152] CloseHandle (hObject=0x788) returned 1 [0136.162] CloseHandle (hObject=0x78c) returned 1 [0136.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\_USg.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\_USg.png", lpFilePart=0x0) returned 0x20 [0136.166] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\_USg.png" (normalized: "c:\\users\\fd1hvy\\desktop\\_usg.png")) returned 1 [0136.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0136.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK", lpFilePart=0x0) returned 0x1c [0136.315] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cc18ab0, ftCreationTime.dwHighDateTime=0x1d5e1fa, ftLastAccessTime.dwLowDateTime=0x8054b180, ftLastAccessTime.dwHighDateTime=0x1d5e113, ftLastWriteTime.dwLowDateTime=0x8054b180, ftLastWriteTime.dwHighDateTime=0x1d5e113, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584af00 [0136.316] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cc18ab0, ftCreationTime.dwHighDateTime=0x1d5e1fa, ftLastAccessTime.dwLowDateTime=0x8054b180, ftLastAccessTime.dwHighDateTime=0x1d5e113, ftLastWriteTime.dwLowDateTime=0x8054b180, ftLastWriteTime.dwHighDateTime=0x1d5e113, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.316] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a58250, ftCreationTime.dwHighDateTime=0x1d5ea63, ftLastAccessTime.dwLowDateTime=0x697021c0, ftLastAccessTime.dwHighDateTime=0x1d5eff5, ftLastWriteTime.dwLowDateTime=0x697021c0, ftLastWriteTime.dwHighDateTime=0x1d5eff5, nFileSizeHigh=0x0, nFileSizeLow=0xb69d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0gTzRzCE.pptx", cAlternateFileName="0GTZRZ~1.PPT")) returned 1 [0136.316] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61e3010, ftCreationTime.dwHighDateTime=0x1d5ee9a, ftLastAccessTime.dwLowDateTime=0xe89e92b0, ftLastAccessTime.dwHighDateTime=0x1d5eb13, ftLastWriteTime.dwLowDateTime=0xe89e92b0, ftLastWriteTime.dwHighDateTime=0x1d5eb13, nFileSizeHigh=0x0, nFileSizeLow=0x16ccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fs4FjH9aCXbzsZM7WKY.mp3", cAlternateFileName="FS4FJH~1.MP3")) returned 1 [0136.317] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8c92c0, ftCreationTime.dwHighDateTime=0x1d5ebd8, ftLastAccessTime.dwLowDateTime=0xa68b6b90, ftLastAccessTime.dwHighDateTime=0x1d5e781, ftLastWriteTime.dwLowDateTime=0xa68b6b90, ftLastWriteTime.dwHighDateTime=0x1d5e781, nFileSizeHigh=0x0, nFileSizeLow=0x58e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iplOps-KE8gr.gif", cAlternateFileName="IPLOPS~1.GIF")) returned 1 [0136.317] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdebca8f0, ftCreationTime.dwHighDateTime=0x1d5e77a, ftLastAccessTime.dwLowDateTime=0x3202a840, ftLastAccessTime.dwHighDateTime=0x1d5eef9, ftLastWriteTime.dwLowDateTime=0x3202a840, ftLastWriteTime.dwHighDateTime=0x1d5eef9, nFileSizeHigh=0x0, nFileSizeLow=0x12915, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsD_Y4AtT TUM6H.bmp", cAlternateFileName="JSD_Y4~1.BMP")) returned 1 [0136.317] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c06bce0, ftCreationTime.dwHighDateTime=0x1d5f043, ftLastAccessTime.dwLowDateTime=0x31fe42a0, ftLastAccessTime.dwHighDateTime=0x1d5eed1, ftLastWriteTime.dwLowDateTime=0x31fe42a0, ftLastWriteTime.dwHighDateTime=0x1d5eed1, nFileSizeHigh=0x0, nFileSizeLow=0xe5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="KfJv PgPqiI.bmp", cAlternateFileName="KFJVPG~1.BMP")) returned 1 [0136.317] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77339970, ftCreationTime.dwHighDateTime=0x1d5e930, ftLastAccessTime.dwLowDateTime=0x287d2f40, ftLastAccessTime.dwHighDateTime=0x1d5e371, ftLastWriteTime.dwLowDateTime=0x287d2f40, ftLastWriteTime.dwHighDateTime=0x1d5e371, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MxjCd1y -YjbcjslQ2YC.png", cAlternateFileName="MXJCD1~1.PNG")) returned 1 [0136.318] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d72f30, ftCreationTime.dwHighDateTime=0x1d5e2ae, ftLastAccessTime.dwLowDateTime=0xed340e20, ftLastAccessTime.dwHighDateTime=0x1d5eee9, ftLastWriteTime.dwLowDateTime=0xed340e20, ftLastWriteTime.dwHighDateTime=0x1d5eee9, nFileSizeHigh=0x0, nFileSizeLow=0x51f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="O1ZIJDdsq.m4a", cAlternateFileName="O1ZIJD~1.M4A")) returned 1 [0136.318] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37891020, ftCreationTime.dwHighDateTime=0x1d5ec3c, ftLastAccessTime.dwLowDateTime=0x7d817ef0, ftLastAccessTime.dwHighDateTime=0x1d5ede5, ftLastWriteTime.dwLowDateTime=0x7d817ef0, ftLastWriteTime.dwHighDateTime=0x1d5ede5, nFileSizeHigh=0x0, nFileSizeLow=0xe9aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ovc9K5ZIwImqp.wav", cAlternateFileName="OVC9K5~1.WAV")) returned 1 [0136.318] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeddc24c0, ftCreationTime.dwHighDateTime=0x1d5edc7, ftLastAccessTime.dwLowDateTime=0x1f9a31b0, ftLastAccessTime.dwHighDateTime=0x1d5e859, ftLastWriteTime.dwLowDateTime=0x1f9a31b0, ftLastWriteTime.dwHighDateTime=0x1d5e859, nFileSizeHigh=0x0, nFileSizeLow=0x142c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1AwM.gif", cAlternateFileName="")) returned 1 [0136.318] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0450c60, ftCreationTime.dwHighDateTime=0x1d5eea1, ftLastAccessTime.dwLowDateTime=0x55e10790, ftLastAccessTime.dwHighDateTime=0x1d5e399, ftLastWriteTime.dwLowDateTime=0x55e10790, ftLastWriteTime.dwHighDateTime=0x1d5e399, nFileSizeHigh=0x0, nFileSizeLow=0x10613, dwReserved0=0x0, dwReserved1=0x0, cFileName="QkFjdZPZM.doc", cAlternateFileName="QKFJDZ~1.DOC")) returned 1 [0136.318] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487a2790, ftCreationTime.dwHighDateTime=0x1d5e8d9, ftLastAccessTime.dwLowDateTime=0x63c0da20, ftLastAccessTime.dwHighDateTime=0x1d5e646, ftLastWriteTime.dwLowDateTime=0x63c0da20, ftLastWriteTime.dwHighDateTime=0x1d5e646, nFileSizeHigh=0x0, nFileSizeLow=0x1384e, dwReserved0=0x0, dwReserved1=0x0, cFileName="s80jGWSaHv98JLm6C1bF.bmp", cAlternateFileName="S80JGW~1.BMP")) returned 1 [0136.319] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacaf1df0, ftCreationTime.dwHighDateTime=0x1d5e44d, ftLastAccessTime.dwLowDateTime=0xe02f68c0, ftLastAccessTime.dwHighDateTime=0x1d5eb1d, ftLastWriteTime.dwLowDateTime=0xe02f68c0, ftLastWriteTime.dwHighDateTime=0x1d5eb1d, nFileSizeHigh=0x0, nFileSizeLow=0x18f28, dwReserved0=0x0, dwReserved1=0x0, cFileName="TBiGnuVHgHJy7oj1jnv.jpg", cAlternateFileName="TBIGNU~1.JPG")) returned 1 [0136.319] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ce68a0, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0x70190510, ftLastAccessTime.dwHighDateTime=0x1d5e10d, ftLastWriteTime.dwLowDateTime=0x70190510, ftLastWriteTime.dwHighDateTime=0x1d5e10d, nFileSizeHigh=0x0, nFileSizeLow=0xc9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="W5VAFpVzXzqi jrp.flv", cAlternateFileName="W5VAFP~1.FLV")) returned 1 [0136.319] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4039a0, ftCreationTime.dwHighDateTime=0x1d5e0d1, ftLastAccessTime.dwLowDateTime=0x47ab88f0, ftLastAccessTime.dwHighDateTime=0x1d5ede7, ftLastWriteTime.dwLowDateTime=0x47ab88f0, ftLastWriteTime.dwHighDateTime=0x1d5ede7, nFileSizeHigh=0x0, nFileSizeLow=0x204e, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2h_k9kUUIm.wav", cAlternateFileName="X2H_K9~1.WAV")) returned 1 [0136.319] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b0c460, ftCreationTime.dwHighDateTime=0x1d5e752, ftLastAccessTime.dwLowDateTime=0x70705850, ftLastAccessTime.dwHighDateTime=0x1d5f06d, ftLastWriteTime.dwLowDateTime=0x70705850, ftLastWriteTime.dwHighDateTime=0x1d5f06d, nFileSizeHigh=0x0, nFileSizeLow=0x512f, dwReserved0=0x0, dwReserved1=0x0, cFileName="XNlOfOnSx.mp3", cAlternateFileName="XNLOFO~1.MP3")) returned 1 [0136.320] FindNextFileW (in: hFindFile=0x584af00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b0c460, ftCreationTime.dwHighDateTime=0x1d5e752, ftLastAccessTime.dwLowDateTime=0x70705850, ftLastAccessTime.dwHighDateTime=0x1d5f06d, ftLastWriteTime.dwLowDateTime=0x70705850, ftLastWriteTime.dwHighDateTime=0x1d5f06d, nFileSizeHigh=0x0, nFileSizeLow=0x512f, dwReserved0=0x0, dwReserved1=0x0, cFileName="XNlOfOnSx.mp3", cAlternateFileName="XNLOFO~1.MP3")) returned 0 [0136.320] FindClose (in: hFindFile=0x584af00 | out: hFindFile=0x584af00) returned 1 [0136.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0136.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0136.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0136.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK", lpFilePart=0x0) returned 0x1c [0136.320] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cc18ab0, ftCreationTime.dwHighDateTime=0x1d5e1fa, ftLastAccessTime.dwLowDateTime=0x8054b180, ftLastAccessTime.dwHighDateTime=0x1d5e113, ftLastWriteTime.dwLowDateTime=0x8054b180, ftLastWriteTime.dwHighDateTime=0x1d5e113, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584ac00 [0136.321] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cc18ab0, ftCreationTime.dwHighDateTime=0x1d5e1fa, ftLastAccessTime.dwLowDateTime=0x8054b180, ftLastAccessTime.dwHighDateTime=0x1d5e113, ftLastWriteTime.dwLowDateTime=0x8054b180, ftLastWriteTime.dwHighDateTime=0x1d5e113, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.321] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a58250, ftCreationTime.dwHighDateTime=0x1d5ea63, ftLastAccessTime.dwLowDateTime=0x697021c0, ftLastAccessTime.dwHighDateTime=0x1d5eff5, ftLastWriteTime.dwLowDateTime=0x697021c0, ftLastWriteTime.dwHighDateTime=0x1d5eff5, nFileSizeHigh=0x0, nFileSizeLow=0xb69d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0gTzRzCE.pptx", cAlternateFileName="0GTZRZ~1.PPT")) returned 1 [0136.321] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe61e3010, ftCreationTime.dwHighDateTime=0x1d5ee9a, ftLastAccessTime.dwLowDateTime=0xe89e92b0, ftLastAccessTime.dwHighDateTime=0x1d5eb13, ftLastWriteTime.dwLowDateTime=0xe89e92b0, ftLastWriteTime.dwHighDateTime=0x1d5eb13, nFileSizeHigh=0x0, nFileSizeLow=0x16ccf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fs4FjH9aCXbzsZM7WKY.mp3", cAlternateFileName="FS4FJH~1.MP3")) returned 1 [0136.321] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8c92c0, ftCreationTime.dwHighDateTime=0x1d5ebd8, ftLastAccessTime.dwLowDateTime=0xa68b6b90, ftLastAccessTime.dwHighDateTime=0x1d5e781, ftLastWriteTime.dwLowDateTime=0xa68b6b90, ftLastWriteTime.dwHighDateTime=0x1d5e781, nFileSizeHigh=0x0, nFileSizeLow=0x58e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iplOps-KE8gr.gif", cAlternateFileName="IPLOPS~1.GIF")) returned 1 [0136.321] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdebca8f0, ftCreationTime.dwHighDateTime=0x1d5e77a, ftLastAccessTime.dwLowDateTime=0x3202a840, ftLastAccessTime.dwHighDateTime=0x1d5eef9, ftLastWriteTime.dwLowDateTime=0x3202a840, ftLastWriteTime.dwHighDateTime=0x1d5eef9, nFileSizeHigh=0x0, nFileSizeLow=0x12915, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsD_Y4AtT TUM6H.bmp", cAlternateFileName="JSD_Y4~1.BMP")) returned 1 [0136.322] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c06bce0, ftCreationTime.dwHighDateTime=0x1d5f043, ftLastAccessTime.dwLowDateTime=0x31fe42a0, ftLastAccessTime.dwHighDateTime=0x1d5eed1, ftLastWriteTime.dwLowDateTime=0x31fe42a0, ftLastWriteTime.dwHighDateTime=0x1d5eed1, nFileSizeHigh=0x0, nFileSizeLow=0xe5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="KfJv PgPqiI.bmp", cAlternateFileName="KFJVPG~1.BMP")) returned 1 [0136.322] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77339970, ftCreationTime.dwHighDateTime=0x1d5e930, ftLastAccessTime.dwLowDateTime=0x287d2f40, ftLastAccessTime.dwHighDateTime=0x1d5e371, ftLastWriteTime.dwLowDateTime=0x287d2f40, ftLastWriteTime.dwHighDateTime=0x1d5e371, nFileSizeHigh=0x0, nFileSizeLow=0x2798, dwReserved0=0x0, dwReserved1=0x0, cFileName="MxjCd1y -YjbcjslQ2YC.png", cAlternateFileName="MXJCD1~1.PNG")) returned 1 [0136.322] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79d72f30, ftCreationTime.dwHighDateTime=0x1d5e2ae, ftLastAccessTime.dwLowDateTime=0xed340e20, ftLastAccessTime.dwHighDateTime=0x1d5eee9, ftLastWriteTime.dwLowDateTime=0xed340e20, ftLastWriteTime.dwHighDateTime=0x1d5eee9, nFileSizeHigh=0x0, nFileSizeLow=0x51f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="O1ZIJDdsq.m4a", cAlternateFileName="O1ZIJD~1.M4A")) returned 1 [0136.322] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37891020, ftCreationTime.dwHighDateTime=0x1d5ec3c, ftLastAccessTime.dwLowDateTime=0x7d817ef0, ftLastAccessTime.dwHighDateTime=0x1d5ede5, ftLastWriteTime.dwLowDateTime=0x7d817ef0, ftLastWriteTime.dwHighDateTime=0x1d5ede5, nFileSizeHigh=0x0, nFileSizeLow=0xe9aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ovc9K5ZIwImqp.wav", cAlternateFileName="OVC9K5~1.WAV")) returned 1 [0136.322] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeddc24c0, ftCreationTime.dwHighDateTime=0x1d5edc7, ftLastAccessTime.dwLowDateTime=0x1f9a31b0, ftLastAccessTime.dwHighDateTime=0x1d5e859, ftLastWriteTime.dwLowDateTime=0x1f9a31b0, ftLastWriteTime.dwHighDateTime=0x1d5e859, nFileSizeHigh=0x0, nFileSizeLow=0x142c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1AwM.gif", cAlternateFileName="")) returned 1 [0136.322] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0450c60, ftCreationTime.dwHighDateTime=0x1d5eea1, ftLastAccessTime.dwLowDateTime=0x55e10790, ftLastAccessTime.dwHighDateTime=0x1d5e399, ftLastWriteTime.dwLowDateTime=0x55e10790, ftLastWriteTime.dwHighDateTime=0x1d5e399, nFileSizeHigh=0x0, nFileSizeLow=0x10613, dwReserved0=0x0, dwReserved1=0x0, cFileName="QkFjdZPZM.doc", cAlternateFileName="QKFJDZ~1.DOC")) returned 1 [0136.323] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x487a2790, ftCreationTime.dwHighDateTime=0x1d5e8d9, ftLastAccessTime.dwLowDateTime=0x63c0da20, ftLastAccessTime.dwHighDateTime=0x1d5e646, ftLastWriteTime.dwLowDateTime=0x63c0da20, ftLastWriteTime.dwHighDateTime=0x1d5e646, nFileSizeHigh=0x0, nFileSizeLow=0x1384e, dwReserved0=0x0, dwReserved1=0x0, cFileName="s80jGWSaHv98JLm6C1bF.bmp", cAlternateFileName="S80JGW~1.BMP")) returned 1 [0136.323] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacaf1df0, ftCreationTime.dwHighDateTime=0x1d5e44d, ftLastAccessTime.dwLowDateTime=0xe02f68c0, ftLastAccessTime.dwHighDateTime=0x1d5eb1d, ftLastWriteTime.dwLowDateTime=0xe02f68c0, ftLastWriteTime.dwHighDateTime=0x1d5eb1d, nFileSizeHigh=0x0, nFileSizeLow=0x18f28, dwReserved0=0x0, dwReserved1=0x0, cFileName="TBiGnuVHgHJy7oj1jnv.jpg", cAlternateFileName="TBIGNU~1.JPG")) returned 1 [0136.323] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ce68a0, ftCreationTime.dwHighDateTime=0x1d5e77d, ftLastAccessTime.dwLowDateTime=0x70190510, ftLastAccessTime.dwHighDateTime=0x1d5e10d, ftLastWriteTime.dwLowDateTime=0x70190510, ftLastWriteTime.dwHighDateTime=0x1d5e10d, nFileSizeHigh=0x0, nFileSizeLow=0xc9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="W5VAFpVzXzqi jrp.flv", cAlternateFileName="W5VAFP~1.FLV")) returned 1 [0136.323] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4039a0, ftCreationTime.dwHighDateTime=0x1d5e0d1, ftLastAccessTime.dwLowDateTime=0x47ab88f0, ftLastAccessTime.dwHighDateTime=0x1d5ede7, ftLastWriteTime.dwLowDateTime=0x47ab88f0, ftLastWriteTime.dwHighDateTime=0x1d5ede7, nFileSizeHigh=0x0, nFileSizeLow=0x204e, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2h_k9kUUIm.wav", cAlternateFileName="X2H_K9~1.WAV")) returned 1 [0136.323] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8b0c460, ftCreationTime.dwHighDateTime=0x1d5e752, ftLastAccessTime.dwLowDateTime=0x70705850, ftLastAccessTime.dwHighDateTime=0x1d5f06d, ftLastWriteTime.dwLowDateTime=0x70705850, ftLastWriteTime.dwHighDateTime=0x1d5f06d, nFileSizeHigh=0x0, nFileSizeLow=0x512f, dwReserved0=0x0, dwReserved1=0x0, cFileName="XNlOfOnSx.mp3", cAlternateFileName="XNLOFO~1.MP3")) returned 1 [0136.324] FindNextFileW (in: hFindFile=0x584ac00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.324] FindClose (in: hFindFile=0x584ac00 | out: hFindFile=0x584ac00) returned 1 [0136.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0136.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0136.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx", lpFilePart=0x0) returned 0x2a [0136.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0136.500] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\0gtzrzce.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0136.501] GetFileType (hFile=0x78c) returned 0x1 [0136.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0136.501] GetFileType (hFile=0x78c) returned 0x1 [0136.501] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx.P4WN3D", lpFilePart=0x0) returned 0x31 [0136.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0136.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\0gtzrzce.pptx.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0136.502] GetFileType (hFile=0x788) returned 0x1 [0136.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0136.502] GetFileType (hFile=0x788) returned 0x1 [0136.502] SetEndOfFile (hFile=0x788) returned 1 [0136.502] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xb69d [0136.503] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.504] WriteFile (in: hFile=0x788, lpBuffer=0x2b03b90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b03b90*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.505] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.506] WriteFile (in: hFile=0x788, lpBuffer=0x2b04b9c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b04b9c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.506] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.506] WriteFile (in: hFile=0x788, lpBuffer=0x2b05ba8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b05ba8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.506] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.507] WriteFile (in: hFile=0x788, lpBuffer=0x2b06bb4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b06bb4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.507] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.507] WriteFile (in: hFile=0x788, lpBuffer=0x2b07bc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b07bc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.507] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.508] WriteFile (in: hFile=0x788, lpBuffer=0x2b08bcc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b08bcc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.508] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.508] WriteFile (in: hFile=0x788, lpBuffer=0x2b09bd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b09bd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.509] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.509] WriteFile (in: hFile=0x788, lpBuffer=0x2b0abe4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0abe4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.509] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.510] WriteFile (in: hFile=0x788, lpBuffer=0x2b0bbf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0bbf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.510] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.510] WriteFile (in: hFile=0x788, lpBuffer=0x2b0cbfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0cbfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.510] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.511] WriteFile (in: hFile=0x788, lpBuffer=0x2b0dc08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0dc08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.511] ReadFile (in: hFile=0x78c, lpBuffer=0x2b02740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b02740*, lpNumberOfBytesRead=0xb3f1fc*=0x69d, lpOverlapped=0x0) returned 1 [0136.511] WriteFile (in: hFile=0x788, lpBuffer=0x2b0f2b0*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b0f2b0*, lpNumberOfBytesWritten=0xb3f1b4*=0x6a0, lpOverlapped=0x0) returned 1 [0136.512] CloseHandle (hObject=0x788) returned 1 [0136.515] CloseHandle (hObject=0x78c) returned 1 [0136.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx", lpFilePart=0x0) returned 0x2a [0136.518] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\0gTzRzCE.pptx" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\0gtzrzce.pptx")) returned 1 [0136.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif", lpFilePart=0x0) returned 0x2d [0136.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0136.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\iplops-ke8gr.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0136.853] GetFileType (hFile=0x78c) returned 0x1 [0136.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0136.853] GetFileType (hFile=0x78c) returned 0x1 [0136.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif.P4WN3D", lpFilePart=0x0) returned 0x34 [0136.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0136.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\iplops-ke8gr.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0136.853] GetFileType (hFile=0x788) returned 0x1 [0136.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0136.854] GetFileType (hFile=0x788) returned 0x1 [0136.854] SetEndOfFile (hFile=0x788) returned 1 [0136.854] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x58e0 [0136.854] ReadFile (in: hFile=0x78c, lpBuffer=0x2b11030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b11030*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.856] WriteFile (in: hFile=0x788, lpBuffer=0x2b12480*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b12480*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.857] ReadFile (in: hFile=0x78c, lpBuffer=0x2b11030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b11030*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.857] WriteFile (in: hFile=0x788, lpBuffer=0x2b1348c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1348c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.857] ReadFile (in: hFile=0x78c, lpBuffer=0x2b11030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b11030*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.858] WriteFile (in: hFile=0x788, lpBuffer=0x2b14498*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b14498*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0136.858] ReadFile (in: hFile=0x78c, lpBuffer=0x2b11030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b11030*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0136.858] WriteFile (in: hFile=0x788, lpBuffer=0x2b154a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b154a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.021] ReadFile (in: hFile=0x78c, lpBuffer=0x2b11030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b11030*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.021] WriteFile (in: hFile=0x788, lpBuffer=0x2b164b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b164b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.021] ReadFile (in: hFile=0x78c, lpBuffer=0x2b11030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b11030*, lpNumberOfBytesRead=0xb3f1fc*=0x8e0, lpOverlapped=0x0) returned 1 [0137.022] WriteFile (in: hFile=0x788, lpBuffer=0x2b17da8*, nNumberOfBytesToWrite=0x8f0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b17da8*, lpNumberOfBytesWritten=0xb3f1b4*=0x8f0, lpOverlapped=0x0) returned 1 [0137.022] CloseHandle (hObject=0x788) returned 1 [0137.024] CloseHandle (hObject=0x78c) returned 1 [0137.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif", lpFilePart=0x0) returned 0x2d [0137.028] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\iplOps-KE8gr.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\iplops-ke8gr.gif")) returned 1 [0137.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp", lpFilePart=0x0) returned 0x30 [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0137.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\jsd_y4att tum6h.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0137.382] GetFileType (hFile=0x78c) returned 0x1 [0137.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0137.382] GetFileType (hFile=0x78c) returned 0x1 [0137.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp.P4WN3D", lpFilePart=0x0) returned 0x37 [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0137.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\jsd_y4att tum6h.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0137.567] GetFileType (hFile=0x788) returned 0x1 [0137.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0137.567] GetFileType (hFile=0x788) returned 0x1 [0137.567] SetEndOfFile (hFile=0x788) returned 1 [0137.897] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x12915 [0137.898] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.899] WriteFile (in: hFile=0x788, lpBuffer=0x2b1afac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1afac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.901] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.901] WriteFile (in: hFile=0x788, lpBuffer=0x2b1bfb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1bfb8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.901] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.902] WriteFile (in: hFile=0x788, lpBuffer=0x2b1cfc4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1cfc4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.902] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.902] WriteFile (in: hFile=0x788, lpBuffer=0x2b1dfd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1dfd0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.903] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.903] WriteFile (in: hFile=0x788, lpBuffer=0x2b1efdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1efdc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.903] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.904] WriteFile (in: hFile=0x788, lpBuffer=0x2b1ffe8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1ffe8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.904] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.904] WriteFile (in: hFile=0x788, lpBuffer=0x2b20ff4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b20ff4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.905] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.905] WriteFile (in: hFile=0x788, lpBuffer=0x2b22000*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b22000*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.905] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.905] WriteFile (in: hFile=0x788, lpBuffer=0x2b2300c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2300c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.906] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.906] WriteFile (in: hFile=0x788, lpBuffer=0x2b24018*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b24018*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.906] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.907] WriteFile (in: hFile=0x788, lpBuffer=0x2b25024*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b25024*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.907] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.907] WriteFile (in: hFile=0x788, lpBuffer=0x2b26030*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b26030*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.908] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.908] WriteFile (in: hFile=0x788, lpBuffer=0x2b2703c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2703c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.908] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.909] WriteFile (in: hFile=0x788, lpBuffer=0x2b28048*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b28048*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.909] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.909] WriteFile (in: hFile=0x788, lpBuffer=0x2b29054*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b29054*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.909] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.910] WriteFile (in: hFile=0x788, lpBuffer=0x2b2a060*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2a060*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.910] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.910] WriteFile (in: hFile=0x788, lpBuffer=0x2b2b06c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2b06c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.911] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0137.911] WriteFile (in: hFile=0x788, lpBuffer=0x2b2c078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2c078*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0137.911] ReadFile (in: hFile=0x78c, lpBuffer=0x2b19b5c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b19b5c*, lpNumberOfBytesRead=0xb3f1fc*=0x915, lpOverlapped=0x0) returned 1 [0137.912] WriteFile (in: hFile=0x788, lpBuffer=0x2b2d9a0*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b2d9a0*, lpNumberOfBytesWritten=0xb3f1b4*=0x920, lpOverlapped=0x0) returned 1 [0137.912] CloseHandle (hObject=0x788) returned 1 [0138.183] CloseHandle (hObject=0x78c) returned 1 [0138.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp", lpFilePart=0x0) returned 0x30 [0138.189] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\JsD_Y4AtT TUM6H.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\jsd_y4att tum6h.bmp")) returned 1 [0138.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp", lpFilePart=0x0) returned 0x2c [0138.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0138.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\kfjv pgpqii.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0138.352] GetFileType (hFile=0x78c) returned 0x1 [0138.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0138.352] GetFileType (hFile=0x78c) returned 0x1 [0138.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp.P4WN3D", lpFilePart=0x0) returned 0x33 [0138.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0138.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\kfjv pgpqii.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0138.353] GetFileType (hFile=0x788) returned 0x1 [0138.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0138.353] GetFileType (hFile=0x788) returned 0x1 [0138.353] SetEndOfFile (hFile=0x788) returned 1 [0138.354] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xe5e4 [0138.354] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.355] WriteFile (in: hFile=0x788, lpBuffer=0x2b30b84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b30b84*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.357] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.357] WriteFile (in: hFile=0x788, lpBuffer=0x2b31b90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b31b90*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.357] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.358] WriteFile (in: hFile=0x788, lpBuffer=0x2b32b9c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b32b9c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.358] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.358] WriteFile (in: hFile=0x788, lpBuffer=0x2b33ba8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b33ba8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.358] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.359] WriteFile (in: hFile=0x788, lpBuffer=0x2b34bb4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b34bb4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.359] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.359] WriteFile (in: hFile=0x788, lpBuffer=0x2b35bc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b35bc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.360] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.360] WriteFile (in: hFile=0x788, lpBuffer=0x2b36bcc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b36bcc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.360] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.360] WriteFile (in: hFile=0x788, lpBuffer=0x2b37bd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b37bd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.361] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.361] WriteFile (in: hFile=0x788, lpBuffer=0x2b38be4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b38be4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.361] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.362] WriteFile (in: hFile=0x788, lpBuffer=0x2b39bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b39bf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.362] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.362] WriteFile (in: hFile=0x788, lpBuffer=0x2b3abfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3abfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.362] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.363] WriteFile (in: hFile=0x788, lpBuffer=0x2b3bc08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3bc08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.363] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.363] WriteFile (in: hFile=0x788, lpBuffer=0x2b3cc14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3cc14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.363] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.364] WriteFile (in: hFile=0x788, lpBuffer=0x2b3dc20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3dc20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.364] ReadFile (in: hFile=0x78c, lpBuffer=0x2b2f734, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b2f734*, lpNumberOfBytesRead=0xb3f1fc*=0x5e4, lpOverlapped=0x0) returned 1 [0138.364] WriteFile (in: hFile=0x788, lpBuffer=0x2b3f218*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b3f218*, lpNumberOfBytesWritten=0xb3f1b4*=0x5f0, lpOverlapped=0x0) returned 1 [0138.365] CloseHandle (hObject=0x788) returned 1 [0138.369] CloseHandle (hObject=0x78c) returned 1 [0138.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp", lpFilePart=0x0) returned 0x2c [0138.371] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\KfJv PgPqiI.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\kfjv pgpqii.bmp")) returned 1 [0138.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png", lpFilePart=0x0) returned 0x35 [0138.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0138.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\mxjcd1y -yjbcjslq2yc.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0138.509] GetFileType (hFile=0x78c) returned 0x1 [0138.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0138.509] GetFileType (hFile=0x78c) returned 0x1 [0138.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png.P4WN3D", lpFilePart=0x0) returned 0x3c [0138.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0138.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\mxjcd1y -yjbcjslq2yc.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0138.510] GetFileType (hFile=0x788) returned 0x1 [0138.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0138.510] GetFileType (hFile=0x788) returned 0x1 [0138.510] SetEndOfFile (hFile=0x788) returned 1 [0138.510] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x2798 [0138.511] ReadFile (in: hFile=0x78c, lpBuffer=0x2b40ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b40ff8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.512] WriteFile (in: hFile=0x788, lpBuffer=0x2b42448*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b42448*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.513] ReadFile (in: hFile=0x78c, lpBuffer=0x2b40ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b40ff8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.514] WriteFile (in: hFile=0x788, lpBuffer=0x2b43454*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b43454*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.514] ReadFile (in: hFile=0x78c, lpBuffer=0x2b40ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b40ff8*, lpNumberOfBytesRead=0xb3f1fc*=0x798, lpOverlapped=0x0) returned 1 [0138.514] WriteFile (in: hFile=0x788, lpBuffer=0x2b44bfc*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b44bfc*, lpNumberOfBytesWritten=0xb3f1b4*=0x7a0, lpOverlapped=0x0) returned 1 [0138.515] CloseHandle (hObject=0x788) returned 1 [0138.522] CloseHandle (hObject=0x78c) returned 1 [0138.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png", lpFilePart=0x0) returned 0x35 [0138.524] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\MxjCd1y -YjbcjslQ2YC.png" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\mxjcd1y -yjbcjslq2yc.png")) returned 1 [0138.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif", lpFilePart=0x0) returned 0x26 [0138.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0138.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\p1awm.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0138.950] GetFileType (hFile=0x78c) returned 0x1 [0138.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0138.950] GetFileType (hFile=0x78c) returned 0x1 [0138.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif.P4WN3D", lpFilePart=0x0) returned 0x2d [0138.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0138.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\p1awm.gif.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0138.951] GetFileType (hFile=0x788) returned 0x1 [0138.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0138.951] GetFileType (hFile=0x788) returned 0x1 [0138.951] SetEndOfFile (hFile=0x788) returned 1 [0138.951] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x142c6 [0138.951] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.953] WriteFile (in: hFile=0x788, lpBuffer=0x2b47db4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b47db4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.955] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.955] WriteFile (in: hFile=0x788, lpBuffer=0x2b48dc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b48dc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.955] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.956] WriteFile (in: hFile=0x788, lpBuffer=0x2b49dcc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b49dcc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.956] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.956] WriteFile (in: hFile=0x788, lpBuffer=0x2b4add8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4add8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.956] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.957] WriteFile (in: hFile=0x788, lpBuffer=0x2b4bde4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4bde4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.957] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.957] WriteFile (in: hFile=0x788, lpBuffer=0x2b4cdf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4cdf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.957] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.958] WriteFile (in: hFile=0x788, lpBuffer=0x2b4ddfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4ddfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.958] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0138.958] WriteFile (in: hFile=0x788, lpBuffer=0x2b4ee08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4ee08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0138.959] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.118] WriteFile (in: hFile=0x788, lpBuffer=0x2b4fe14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4fe14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.119] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.119] WriteFile (in: hFile=0x788, lpBuffer=0x2b50e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b50e20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.119] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.120] WriteFile (in: hFile=0x788, lpBuffer=0x2b51e2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b51e2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.120] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.120] WriteFile (in: hFile=0x788, lpBuffer=0x2b52e38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b52e38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.120] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.121] WriteFile (in: hFile=0x788, lpBuffer=0x2b53e44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b53e44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.121] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.121] WriteFile (in: hFile=0x788, lpBuffer=0x2b54e50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b54e50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.121] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.122] WriteFile (in: hFile=0x788, lpBuffer=0x2b55e5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b55e5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.122] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.122] WriteFile (in: hFile=0x788, lpBuffer=0x2b56e68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b56e68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.123] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.123] WriteFile (in: hFile=0x788, lpBuffer=0x2b57e74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b57e74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.123] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.123] WriteFile (in: hFile=0x788, lpBuffer=0x2b58e80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b58e80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.124] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.124] WriteFile (in: hFile=0x788, lpBuffer=0x2b59e8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b59e8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.124] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.125] WriteFile (in: hFile=0x788, lpBuffer=0x2b5ae98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5ae98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.125] ReadFile (in: hFile=0x78c, lpBuffer=0x2b46964, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b46964*, lpNumberOfBytesRead=0xb3f1fc*=0x2c6, lpOverlapped=0x0) returned 1 [0139.125] WriteFile (in: hFile=0x788, lpBuffer=0x2b5c170*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b5c170*, lpNumberOfBytesWritten=0xb3f1b4*=0x2d0, lpOverlapped=0x0) returned 1 [0139.126] CloseHandle (hObject=0x788) returned 1 [0139.152] CloseHandle (hObject=0x78c) returned 1 [0139.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif", lpFilePart=0x0) returned 0x26 [0139.154] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\p1AwM.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\p1awm.gif")) returned 1 [0139.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc", lpFilePart=0x0) returned 0x2a [0139.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0139.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\qkfjdzpzm.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0139.161] GetFileType (hFile=0x78c) returned 0x1 [0139.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0139.161] GetFileType (hFile=0x78c) returned 0x1 [0139.161] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc.P4WN3D", lpFilePart=0x0) returned 0x31 [0139.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0139.161] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\qkfjdzpzm.doc.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0139.162] GetFileType (hFile=0x788) returned 0x1 [0139.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0139.162] GetFileType (hFile=0x788) returned 0x1 [0139.162] SetEndOfFile (hFile=0x788) returned 1 [0139.162] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x10613 [0139.162] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.164] WriteFile (in: hFile=0x788, lpBuffer=0x2b5f318*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5f318*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.165] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.165] WriteFile (in: hFile=0x788, lpBuffer=0x2b60324*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b60324*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.165] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.166] WriteFile (in: hFile=0x788, lpBuffer=0x2b61330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b61330*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.166] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.166] WriteFile (in: hFile=0x788, lpBuffer=0x2b6233c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6233c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.166] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.166] WriteFile (in: hFile=0x788, lpBuffer=0x2b63348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b63348*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.167] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.167] WriteFile (in: hFile=0x788, lpBuffer=0x2b64354*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b64354*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.167] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.167] WriteFile (in: hFile=0x788, lpBuffer=0x2b65360*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65360*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.168] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.168] WriteFile (in: hFile=0x788, lpBuffer=0x2b6636c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6636c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.168] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.168] WriteFile (in: hFile=0x788, lpBuffer=0x2b67378*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b67378*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.169] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.169] WriteFile (in: hFile=0x788, lpBuffer=0x2b68384*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b68384*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.169] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.169] WriteFile (in: hFile=0x788, lpBuffer=0x2b69390*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b69390*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.170] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.170] WriteFile (in: hFile=0x788, lpBuffer=0x2b6a39c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6a39c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.170] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.171] WriteFile (in: hFile=0x788, lpBuffer=0x2b6b3a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6b3a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.171] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.171] WriteFile (in: hFile=0x788, lpBuffer=0x2b6c3b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6c3b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.171] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.172] WriteFile (in: hFile=0x788, lpBuffer=0x2b6d3c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6d3c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.172] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.172] WriteFile (in: hFile=0x788, lpBuffer=0x2b6e3cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6e3cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.172] ReadFile (in: hFile=0x78c, lpBuffer=0x2b5dec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b5dec8*, lpNumberOfBytesRead=0xb3f1fc*=0x613, lpOverlapped=0x0) returned 1 [0139.173] WriteFile (in: hFile=0x788, lpBuffer=0x2b6f9f4*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b6f9f4*, lpNumberOfBytesWritten=0xb3f1b4*=0x620, lpOverlapped=0x0) returned 1 [0139.173] CloseHandle (hObject=0x788) returned 1 [0139.176] CloseHandle (hObject=0x78c) returned 1 [0139.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc", lpFilePart=0x0) returned 0x2a [0139.350] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\QkFjdZPZM.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\qkfjdzpzm.doc")) returned 1 [0139.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp", lpFilePart=0x0) returned 0x35 [0139.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0139.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\s80jgwsahv98jlm6c1bf.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0139.476] GetFileType (hFile=0x78c) returned 0x1 [0139.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0139.476] GetFileType (hFile=0x78c) returned 0x1 [0139.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp.P4WN3D", lpFilePart=0x0) returned 0x3c [0139.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0139.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\s80jgwsahv98jlm6c1bf.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0139.477] GetFileType (hFile=0x788) returned 0x1 [0139.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0139.477] GetFileType (hFile=0x788) returned 0x1 [0139.477] SetEndOfFile (hFile=0x788) returned 1 [0139.477] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1384e [0139.478] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.479] WriteFile (in: hFile=0x788, lpBuffer=0x2b72c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b72c20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.480] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.481] WriteFile (in: hFile=0x788, lpBuffer=0x2b73c2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b73c2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.481] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.481] WriteFile (in: hFile=0x788, lpBuffer=0x2b74c38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b74c38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.481] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.482] WriteFile (in: hFile=0x788, lpBuffer=0x2b75c44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b75c44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.482] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.482] WriteFile (in: hFile=0x788, lpBuffer=0x2b76c50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b76c50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.483] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.483] WriteFile (in: hFile=0x788, lpBuffer=0x2b77c5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b77c5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.483] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.484] WriteFile (in: hFile=0x788, lpBuffer=0x2b78c68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b78c68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.484] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.484] WriteFile (in: hFile=0x788, lpBuffer=0x2b79c74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b79c74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.484] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.485] WriteFile (in: hFile=0x788, lpBuffer=0x2b7ac80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7ac80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.485] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.485] WriteFile (in: hFile=0x788, lpBuffer=0x2b7bc8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7bc8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.486] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.486] WriteFile (in: hFile=0x788, lpBuffer=0x2b7cc98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7cc98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.486] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.486] WriteFile (in: hFile=0x788, lpBuffer=0x2b7dca4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7dca4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.487] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.487] WriteFile (in: hFile=0x788, lpBuffer=0x2b7ecb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7ecb0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.487] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.487] WriteFile (in: hFile=0x788, lpBuffer=0x2b7fcbc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7fcbc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.488] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.488] WriteFile (in: hFile=0x788, lpBuffer=0x2b80cc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b80cc8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.488] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.489] WriteFile (in: hFile=0x788, lpBuffer=0x2b81cd4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b81cd4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.489] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.489] WriteFile (in: hFile=0x788, lpBuffer=0x2b82ce0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b82ce0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.490] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.490] WriteFile (in: hFile=0x788, lpBuffer=0x2b83cec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b83cec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.491] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.491] WriteFile (in: hFile=0x788, lpBuffer=0x2b84cf8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b84cf8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.491] ReadFile (in: hFile=0x78c, lpBuffer=0x2b717d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b717d0*, lpNumberOfBytesRead=0xb3f1fc*=0x84e, lpOverlapped=0x0) returned 1 [0139.492] WriteFile (in: hFile=0x788, lpBuffer=0x2b86550*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b86550*, lpNumberOfBytesWritten=0xb3f1b4*=0x850, lpOverlapped=0x0) returned 1 [0139.492] CloseHandle (hObject=0x788) returned 1 [0139.497] CloseHandle (hObject=0x78c) returned 1 [0139.499] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp", lpFilePart=0x0) returned 0x35 [0139.499] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\s80jGWSaHv98JLm6C1bF.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\s80jgwsahv98jlm6c1bf.bmp")) returned 1 [0139.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg", lpFilePart=0x0) returned 0x34 [0139.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0139.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\tbignuvhghjy7oj1jnv.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0139.594] GetFileType (hFile=0x78c) returned 0x1 [0139.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0139.594] GetFileType (hFile=0x78c) returned 0x1 [0139.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg.P4WN3D", lpFilePart=0x0) returned 0x3b [0139.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0139.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg.P4WN3D" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\tbignuvhghjy7oj1jnv.jpg.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0139.595] GetFileType (hFile=0x788) returned 0x1 [0139.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0139.595] GetFileType (hFile=0x788) returned 0x1 [0139.595] SetEndOfFile (hFile=0x788) returned 1 [0139.595] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x18f28 [0139.595] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.597] WriteFile (in: hFile=0x788, lpBuffer=0x2b89790*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b89790*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.598] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.598] WriteFile (in: hFile=0x788, lpBuffer=0x2b8a79c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8a79c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.599] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.599] WriteFile (in: hFile=0x788, lpBuffer=0x2b8b7a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8b7a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.599] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.599] WriteFile (in: hFile=0x788, lpBuffer=0x2b8c7b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8c7b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.599] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.786] WriteFile (in: hFile=0x788, lpBuffer=0x2b8d7c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8d7c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.786] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.787] WriteFile (in: hFile=0x788, lpBuffer=0x2b8e7cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8e7cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.787] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.787] WriteFile (in: hFile=0x788, lpBuffer=0x2b8f7d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8f7d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.788] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.788] WriteFile (in: hFile=0x788, lpBuffer=0x2b907e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b907e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.788] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.788] WriteFile (in: hFile=0x788, lpBuffer=0x2b917f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b917f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.789] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.789] WriteFile (in: hFile=0x788, lpBuffer=0x2b927fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b927fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.789] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.789] WriteFile (in: hFile=0x788, lpBuffer=0x2b93808*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b93808*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.789] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.790] WriteFile (in: hFile=0x788, lpBuffer=0x2b94814*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b94814*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.790] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.790] WriteFile (in: hFile=0x788, lpBuffer=0x2b95820*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b95820*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.790] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.791] WriteFile (in: hFile=0x788, lpBuffer=0x2b9682c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9682c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.791] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.791] WriteFile (in: hFile=0x788, lpBuffer=0x2b97838*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b97838*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.791] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.791] WriteFile (in: hFile=0x788, lpBuffer=0x2b98844*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b98844*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.792] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.792] WriteFile (in: hFile=0x788, lpBuffer=0x2b99850*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b99850*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.792] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.792] WriteFile (in: hFile=0x788, lpBuffer=0x2b9a85c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9a85c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.793] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.793] WriteFile (in: hFile=0x788, lpBuffer=0x2b9b868*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9b868*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.793] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.793] WriteFile (in: hFile=0x788, lpBuffer=0x2b9c874*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9c874*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.794] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.794] WriteFile (in: hFile=0x788, lpBuffer=0x2b9d880*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9d880*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.794] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.795] WriteFile (in: hFile=0x788, lpBuffer=0x2b9e88c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9e88c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.795] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.795] WriteFile (in: hFile=0x788, lpBuffer=0x2b9f898*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9f898*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.795] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0139.796] WriteFile (in: hFile=0x788, lpBuffer=0x2ba08a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba08a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0139.796] ReadFile (in: hFile=0x78c, lpBuffer=0x2b88340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b88340*, lpNumberOfBytesRead=0xb3f1fc*=0xf28, lpOverlapped=0x0) returned 1 [0139.797] WriteFile (in: hFile=0x788, lpBuffer=0x2ba27dc*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2ba27dc*, lpNumberOfBytesWritten=0xb3f1b4*=0xf30, lpOverlapped=0x0) returned 1 [0139.797] CloseHandle (hObject=0x788) returned 1 [0139.806] CloseHandle (hObject=0x78c) returned 1 [0139.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg", lpFilePart=0x0) returned 0x34 [0139.809] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xtTK\\TBiGnuVHgHJy7oj1jnv.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\xttk\\tbignuvhghjy7oj1jnv.jpg")) returned 1 [0139.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Cookies", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Cookies", lpFilePart=0x0) returned 0x17 [0139.814] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Cookies\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0139.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts", lpFilePart=0x0) returned 0x18 [0139.818] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0139.945] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.945] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0139.946] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0139.946] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0139.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0139.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts", lpFilePart=0x0) returned 0x18 [0139.946] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0139.947] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.947] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0139.947] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.947] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0139.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0139.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0139.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Application Data", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Application Data", lpFilePart=0x0) returned 0x20 [0139.949] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Application Data\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0139.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.953] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated", lpFilePart=0x0) returned 0x19 [0139.953] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849100 [0139.959] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.960] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0139.960] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0139.960] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.960] FindClose (in: hFindFile=0x5849100 | out: hFindFile=0x5849100) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0139.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0139.961] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated", lpFilePart=0x0) returned 0x19 [0139.962] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0139.963] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.963] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0139.963] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0139.963] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 0 [0139.964] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0139.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0139.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0139.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.966] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents", lpFilePart=0x0) returned 0x23 [0139.966] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849540 [0139.970] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.970] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0139.970] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0139.971] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0139.971] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.971] FindClose (in: hFindFile=0x5849540 | out: hFindFile=0x5849540) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0139.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0139.972] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents", lpFilePart=0x0) returned 0x23 [0139.972] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0139.974] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.974] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0139.974] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0139.974] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0139.975] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0139.975] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0139.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0139.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0139.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Videos", lpFilePart=0x0) returned 0x2d [0139.977] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0139.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.982] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2f [0139.983] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0139.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.988] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Music", lpFilePart=0x0) returned 0x2c [0139.988] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0139.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.992] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0139.993] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0139.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0139.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0139.996] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0139.996] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0139.996] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.997] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0139.998] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0139.998] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0139.998] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0139.998] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0139.998] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0139.998] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0139.999] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0139.999] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0139.999] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0139.999] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0139.999] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0140.000] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x19fa8eb, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x19fa8eb, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0140.000] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0140.000] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0140.000] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0140.000] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0140.001] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0140.001] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0140.001] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0140.001] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0140.002] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0140.002] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0140.002] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0140.002] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0140.002] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0140.003] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0140.003] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0140.003] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0140.003] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.003] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.004] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0140.004] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0140.004] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.005] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0140.005] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0140.005] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0140.005] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0140.005] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0140.006] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0140.006] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0140.006] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0140.006] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0140.007] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0140.007] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0140.007] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0140.007] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x19fa8eb, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x19fa8eb, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0140.007] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0140.008] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0140.008] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0140.008] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0140.008] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0140.008] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0140.009] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0140.009] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0140.009] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0140.009] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0140.009] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0140.010] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0140.010] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0140.010] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0140.010] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0140.011] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0140.011] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0140.011] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0140.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.016] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0140.016] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.176] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.177] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.177] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.177] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0140.177] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849480 [0140.177] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.178] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.179] FindClose (in: hFindFile=0x5849480 | out: hFindFile=0x5849480) returned 1 [0140.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.180] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates", lpFilePart=0x0) returned 0x1a [0140.180] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.187] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu", lpFilePart=0x0) returned 0x1b [0140.188] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.192] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo", lpFilePart=0x0) returned 0x17 [0140.192] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.196] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0140.196] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849080 [0140.198] FindNextFileW (in: hFindFile=0x5849080, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.198] FindNextFileW (in: hFindFile=0x5849080, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.198] FindClose (in: hFindFile=0x5849080 | out: hFindFile=0x5849080) returned 1 [0140.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.199] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0140.199] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58492c0 [0140.199] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.199] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.200] FindClose (in: hFindFile=0x58492c0 | out: hFindFile=0x58492c0) returned 1 [0140.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.201] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent", lpFilePart=0x0) returned 0x17 [0140.201] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.206] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood", lpFilePart=0x0) returned 0x1a [0140.206] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.212] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0140.212] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.214] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.214] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.215] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.215] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0140.215] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.216] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.216] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.216] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.217] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood", lpFilePart=0x0) returned 0x18 [0140.218] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.308] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents", lpFilePart=0x0) returned 0x1d [0140.308] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.311] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0140.311] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.312] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.312] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.312] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.313] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0140.313] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849040 [0140.313] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.313] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.314] FindClose (in: hFindFile=0x5849040 | out: hFindFile=0x5849040) returned 1 [0140.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.315] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings", lpFilePart=0x0) returned 0x1f [0140.315] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.318] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0140.318] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849040 [0140.319] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.319] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.319] FindClose (in: hFindFile=0x5849040 | out: hFindFile=0x5849040) returned 1 [0140.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.319] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0140.319] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.320] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.320] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.320] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.321] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0140.321] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.322] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.323] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.323] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.323] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0140.323] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.323] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.323] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.324] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.324] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0140.325] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.325] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.325] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.325] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.326] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0140.326] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849580 [0140.326] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.326] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.327] FindClose (in: hFindFile=0x5849580 | out: hFindFile=0x5849580) returned 1 [0140.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.327] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0140.328] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.330] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.330] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0140.331] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0140.331] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0140.331] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.331] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.332] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0140.332] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.333] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.334] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0140.334] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0140.334] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0140.334] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0140.334] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.336] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos", lpFilePart=0x0) returned 0x24 [0140.336] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.342] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures", lpFilePart=0x0) returned 0x26 [0140.342] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.346] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music", lpFilePart=0x0) returned 0x23 [0140.346] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.353] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0140.353] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849280 [0140.354] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.354] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.354] FindClose (in: hFindFile=0x5849280 | out: hFindFile=0x5849280) returned 1 [0140.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.355] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0140.356] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849100 [0140.356] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.356] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.357] FindClose (in: hFindFile=0x5849100 | out: hFindFile=0x5849100) returned 1 [0140.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.358] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies", lpFilePart=0x0) returned 0x18 [0140.358] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.362] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data", lpFilePart=0x0) returned 0x21 [0140.362] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.366] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0140.366] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.367] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.367] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0140.368] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0140.368] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0140.368] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0140.368] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0140.369] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0140.369] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0140.369] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0140.369] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0140.369] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0140.370] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0140.372] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.372] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.372] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0140.372] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849280 [0140.373] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.373] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0140.373] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0140.373] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0140.374] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0140.374] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0140.374] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0140.374] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0140.374] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0140.375] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0140.375] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0140.375] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0140.375] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0140.375] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0140.375] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0140.376] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0140.376] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0140.376] FindNextFileW (in: hFindFile=0x5849280, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0 [0140.376] FindClose (in: hFindFile=0x5849280 | out: hFindFile=0x5849280) returned 1 [0140.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.377] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared", lpFilePart=0x0) returned 0x1c [0140.377] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.378] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.378] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0140.378] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.379] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.379] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared", lpFilePart=0x0) returned 0x1c [0140.379] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.379] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.380] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0140.380] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0 [0140.380] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.381] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared\\Logs", lpFilePart=0x0) returned 0x21 [0140.381] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.475] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.477] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0140.477] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0140.477] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0140.477] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0140.477] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0140.477] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0140.478] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0140.478] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0140.478] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0140.478] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0140.478] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0140.479] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0140.479] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0140.479] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0140.479] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0140.479] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0140.479] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0140.480] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0140.480] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0140.480] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0140.480] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcfcbff7d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xcfcbff7d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0140.480] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x917b63d4, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb8b481f0, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0140.480] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x150f0f86, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x39296693, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0140.531] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1f83bc0, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x32ea756e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0140.531] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfdc37a18, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x290206fd, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0140.531] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8a5979b2, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8a5979b2, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0140.532] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcbc9fc38, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xefa43826, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0140.532] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf1e2e9c9, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0x1ca46d4f, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0140.532] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf7e12839, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x26688c0b, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0140.532] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0140.533] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0140.533] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0140.533] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0140.533] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0140.534] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0140.534] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0140.534] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0140.534] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0140.534] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0140.535] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0140.535] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0140.535] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0140.535] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0140.536] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UP4198~1.ETL")) returned 1 [0140.536] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UP96CC~1.ETL")) returned 1 [0140.536] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UP7B54~1.ETL")) returned 1 [0140.536] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPC098~1.ETL")) returned 1 [0140.536] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.029.etl", cAlternateFileName="UP16CC~1.ETL")) returned 1 [0140.537] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.030.etl", cAlternateFileName="UPDA92~1.ETL")) returned 1 [0140.537] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.031.etl", cAlternateFileName="UPBF2A~1.ETL")) returned 1 [0140.537] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.032.etl", cAlternateFileName="UP750B~1.ETL")) returned 1 [0140.538] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.033.etl", cAlternateFileName="UP6487~1.ETL")) returned 1 [0140.538] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.034.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0140.538] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.035.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0140.538] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.036.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0140.538] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.037.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0140.539] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0140.539] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0140.539] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 0 [0140.539] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.540] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared\\Logs", lpFilePart=0x0) returned 0x21 [0140.540] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0140.541] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.541] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0140.541] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0140.541] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0140.542] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0140.542] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0140.542] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0140.542] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0140.542] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0140.542] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0140.543] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0140.545] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0140.545] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0140.545] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0140.545] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0140.546] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0140.546] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0140.546] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x659bdc21, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x659bdc21, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0140.546] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcfcbff7d, ftLastAccessTime.dwHighDateTime=0x1d5e7c2, ftLastWriteTime.dwLowDateTime=0xcfcbff7d, ftLastWriteTime.dwHighDateTime=0x1d5e7c2, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0140.546] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x917b63d4, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb8b481f0, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0140.546] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x150f0f86, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x39296693, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0140.546] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1f83bc0, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x32ea756e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0140.546] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfdc37a18, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x290206fd, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0140.547] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8a5979b2, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8a5979b2, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0140.547] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcbc9fc38, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xefa43826, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0140.547] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf1e2e9c9, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0x1ca46d4f, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0140.547] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf7e12839, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x26688c0b, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0140.548] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UP4198~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UP96CC~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UP7B54~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPC098~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.029.etl", cAlternateFileName="UP16CC~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.030.etl", cAlternateFileName="UPDA92~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.031.etl", cAlternateFileName="UPBF2A~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.032.etl", cAlternateFileName="UP750B~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.033.etl", cAlternateFileName="UP6487~1.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.034.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.035.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0140.549] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.036.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0140.550] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.037.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0140.550] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0140.550] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0140.550] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.550] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0140.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.558] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate", lpFilePart=0x0) returned 0x1d [0140.558] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.559] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.689] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d4af5da, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d4af5da, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0140.689] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.689] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.690] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate", lpFilePart=0x0) returned 0x1d [0140.690] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849100 [0140.691] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d4af5da, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d4af5da, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0140.691] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d4af5da, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d4af5da, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0140.691] FindClose (in: hFindFile=0x5849100 | out: hFindFile=0x5849100) returned 1 [0140.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.691] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate\\UpdateStore", lpFilePart=0x0) returned 0x29 [0140.691] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d4af5da, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d4d5893, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58492c0 [0140.692] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d4af5da, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d4d5893, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.692] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xdc9086d4, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateCspStore.xml", cAlternateFileName="UPDATE~2.XML")) returned 1 [0140.692] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cdae769, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d48931c, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0140.692] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cdae769, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d48931c, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 0 [0140.692] FindClose (in: hFindFile=0x58492c0 | out: hFindFile=0x58492c0) returned 1 [0140.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.692] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate\\UpdateStore", lpFilePart=0x0) returned 0x29 [0140.692] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d4d5893, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d4d5893, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.693] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7d4d5893, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d4d5893, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.693] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xdc9086d4, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateCspStore.xml", cAlternateFileName="UPDATE~2.XML")) returned 1 [0140.693] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cdae769, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x7d48931c, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0140.693] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.693] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.693] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates", lpFilePart=0x0) returned 0x1c [0140.693] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.697] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Start Menu", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Start Menu", lpFilePart=0x0) returned 0x1d [0140.697] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0140.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0140.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.785] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\SoftwareDistribution", lpFilePart=0x0) returned 0x27 [0140.785] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849480 [0140.785] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.786] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.786] FindClose (in: hFindFile=0x5849480 | out: hFindFile=0x5849480) returned 1 [0140.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\SoftwareDistribution", lpFilePart=0x0) returned 0x27 [0140.786] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849380 [0140.786] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.787] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0140.787] FindClose (in: hFindFile=0x5849380 | out: hFindFile=0x5849380) returned 1 [0140.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.788] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\regid.1991-06.com.microsoft", lpFilePart=0x0) returned 0x2e [0140.788] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849100 [0140.792] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.792] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1 [0140.792] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1 [0140.792] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1 [0140.793] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0140.793] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 0 [0140.793] FindClose (in: hFindFile=0x5849100 | out: hFindFile=0x5849100) returned 1 [0140.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.794] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\regid.1991-06.com.microsoft", lpFilePart=0x0) returned 0x2e [0140.794] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849480 [0140.795] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.795] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1 [0140.796] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1 [0140.796] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1 [0140.796] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0140.796] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.796] FindClose (in: hFindFile=0x5849480 | out: hFindFile=0x5849480) returned 1 [0140.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.799] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0140.799] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849580 [0140.800] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.800] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0140.801] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0140.801] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0140.801] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0140.801] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0140.801] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0140.801] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0140.802] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0140.802] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0140.802] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0140.802] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0140.802] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0140.802] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0140.802] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0140.803] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0140.803] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0140.803] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0140.803] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0140.803] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.803] FindClose (in: hFindFile=0x5849580 | out: hFindFile=0x5849580) returned 1 [0140.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.804] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0140.805] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.806] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.806] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0140.806] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0140.806] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0140.806] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0140.806] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0140.807] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0140.807] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0140.807] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0140.807] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0140.808] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0140.808] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0140.808] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0140.808] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0140.808] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0140.808] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0140.809] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0140.860] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0140.861] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0140.861] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0140.861] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.863] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x52 [0140.863] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.865] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.865] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.865] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.865] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.866] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x52 [0140.866] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.866] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.866] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.866] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0140.866] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.868] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0140.868] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849040 [0140.869] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.869] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0140.869] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.869] FindClose (in: hFindFile=0x5849040 | out: hFindFile=0x5849040) returned 1 [0140.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.870] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0140.870] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0140.870] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.870] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0140.870] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0140.871] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0140.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.871] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0140.872] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849380 [0140.873] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.873] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x6151ff00, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.873] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.873] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0140.873] FindClose (in: hFindFile=0x5849380 | out: hFindFile=0x5849380) returned 1 [0140.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.874] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0140.874] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.874] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.874] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x6151ff00, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.875] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.875] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.875] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.876] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpFilePart=0x0) returned 0x47 [0140.876] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0140.877] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.877] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3714fdce, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0140.877] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0140.877] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0140.878] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0140.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.878] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpFilePart=0x0) returned 0x47 [0140.878] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.878] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.878] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3714fdce, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0140.879] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0140.879] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.879] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.880] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x47 [0140.880] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.884] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.884] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35efb7db, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0140.884] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0140.884] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0140.884] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.885] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x47 [0140.885] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.885] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.885] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35efb7db, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0140.886] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0140.886] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.886] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.887] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x47 [0140.887] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849380 [0140.888] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.888] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x37687158, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0140.888] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0140.888] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0140.889] FindClose (in: hFindFile=0x5849380 | out: hFindFile=0x5849380) returned 1 [0140.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.889] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x47 [0140.889] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849100 [0140.889] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.890] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x37687158, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0140.890] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0140.890] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.890] FindClose (in: hFindFile=0x5849100 | out: hFindFile=0x5849100) returned 1 [0140.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.891] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x53 [0140.891] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849580 [0140.892] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.892] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.892] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.892] FindClose (in: hFindFile=0x5849580 | out: hFindFile=0x5849580) returned 1 [0140.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.893] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x53 [0140.893] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.893] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.893] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.893] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0140.894] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.894] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0140.894] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.894] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.894] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0140.895] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.895] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.895] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0140.895] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849040 [0140.895] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.896] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0140.896] FindNextFileW (in: hFindFile=0x5849040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0140.896] FindClose (in: hFindFile=0x5849040 | out: hFindFile=0x5849040) returned 1 [0140.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.896] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0140.897] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.959] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.959] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe90b3300, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.959] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.959] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0140.960] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.960] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0140.960] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849380 [0140.961] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.961] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe90b3300, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.961] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.961] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.961] FindClose (in: hFindFile=0x5849380 | out: hFindFile=0x5849380) returned 1 [0140.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.962] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0140.962] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.963] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.963] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.964] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.964] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.964] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0140.964] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.964] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.965] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.965] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0140.965] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.965] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0140.965] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0140.966] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.966] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0140.967] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.967] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0140.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.967] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0140.967] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.967] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.968] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0140.968] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0140.968] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.968] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0140.968] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.969] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.969] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xa4bd6800, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.969] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.969] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0140.969] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.975] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0140.975] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.976] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.976] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xa4bd6800, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.976] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.976] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.976] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.976] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0140.977] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.978] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.978] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0140.978] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0140.978] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0140.978] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.979] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0140.979] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849380 [0140.979] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.979] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0140.979] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0140.979] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.980] FindClose (in: hFindFile=0x5849380 | out: hFindFile=0x5849380) returned 1 [0140.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.980] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0140.980] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849440 [0140.981] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.981] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.982] FindNextFileW (in: hFindFile=0x5849440, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.982] FindClose (in: hFindFile=0x5849440 | out: hFindFile=0x5849440) returned 1 [0140.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.982] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0140.982] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849580 [0140.982] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.982] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.983] FindNextFileW (in: hFindFile=0x5849580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0140.983] FindClose (in: hFindFile=0x5849580 | out: hFindFile=0x5849580) returned 1 [0140.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.983] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0140.983] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.984] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.984] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0140.984] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.985] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0140.985] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849100 [0140.985] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.985] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0140.985] FindNextFileW (in: hFindFile=0x5849100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0140.985] FindClose (in: hFindFile=0x5849100 | out: hFindFile=0x5849100) returned 1 [0140.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.986] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0140.986] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.986] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.986] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x966f4c00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.986] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.986] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0140.987] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.987] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0140.987] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58494c0 [0140.987] FindNextFileW (in: hFindFile=0x58494c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.987] FindNextFileW (in: hFindFile=0x58494c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x966f4c00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.987] FindNextFileW (in: hFindFile=0x58494c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.987] FindNextFileW (in: hFindFile=0x58494c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.987] FindClose (in: hFindFile=0x58494c0 | out: hFindFile=0x58494c0) returned 1 [0140.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.988] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0140.988] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.988] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.988] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.988] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.988] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.989] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0140.989] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.989] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.989] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.989] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0140.989] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0140.990] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58492c0 [0140.990] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.990] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0140.990] FindNextFileW (in: hFindFile=0x58492c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.990] FindClose (in: hFindFile=0x58492c0 | out: hFindFile=0x58492c0) returned 1 [0140.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0140.991] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849540 [0140.991] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.991] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0140.991] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0140.991] FindClose (in: hFindFile=0x5849540 | out: hFindFile=0x5849540) returned 1 [0140.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.992] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0140.992] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849380 [0140.992] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.992] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x98d1a600, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.992] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.992] FindNextFileW (in: hFindFile=0x5849380, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0140.992] FindClose (in: hFindFile=0x5849380 | out: hFindFile=0x5849380) returned 1 [0140.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.993] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0140.993] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0140.993] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.993] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x98d1a600, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0140.993] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0140.993] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.993] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0140.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0140.994] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0140.997] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.998] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.998] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.998] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0140.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0140.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0140.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0140.998] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0140.998] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0140.998] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.998] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0140.999] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0140.999] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0140.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0140.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0140.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0140.999] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0140.999] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58494c0 [0141.052] FindNextFileW (in: hFindFile=0x58494c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.052] FindNextFileW (in: hFindFile=0x58494c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0141.052] FindNextFileW (in: hFindFile=0x58494c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.052] FindClose (in: hFindFile=0x58494c0 | out: hFindFile=0x58494c0) returned 1 [0141.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0141.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0141.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0141.053] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0141.053] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849240 [0141.053] FindNextFileW (in: hFindFile=0x5849240, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.053] FindNextFileW (in: hFindFile=0x5849240, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0141.053] FindNextFileW (in: hFindFile=0x5849240, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0141.053] FindClose (in: hFindFile=0x5849240 | out: hFindFile=0x5849240) returned 1 [0141.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0141.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0141.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0141.054] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0141.054] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0141.054] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.054] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x898d2e00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.054] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.054] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.054] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0141.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0141.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0141.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0141.055] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0141.055] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0141.055] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.055] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x898d2e00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.055] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.055] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.055] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0141.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0141.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0141.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0141.056] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0141.056] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0141.056] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.056] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0141.056] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.057] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0141.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0141.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0141.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0141.057] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0141.057] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0141.057] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.057] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0141.057] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0141.057] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0141.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0141.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0141.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0141.058] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0141.058] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849540 [0141.058] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.058] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0141.058] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.058] FindClose (in: hFindFile=0x5849540 | out: hFindFile=0x5849540) returned 1 [0141.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0141.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0141.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0141.059] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0141.059] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849540 [0141.059] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.060] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0141.060] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0141.060] FindClose (in: hFindFile=0x5849540 | out: hFindFile=0x5849540) returned 1 [0141.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0141.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0141.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0141.060] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0141.060] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849200 [0141.060] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.061] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x8abe5b00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.061] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.061] FindNextFileW (in: hFindFile=0x5849200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.061] FindClose (in: hFindFile=0x5849200 | out: hFindFile=0x5849200) returned 1 [0141.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0141.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0141.061] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0141.061] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849300 [0141.061] FindNextFileW (in: hFindFile=0x5849300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.062] FindNextFileW (in: hFindFile=0x5849300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x8abe5b00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.062] FindNextFileW (in: hFindFile=0x5849300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.062] FindNextFileW (in: hFindFile=0x5849300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.062] FindClose (in: hFindFile=0x5849300 | out: hFindFile=0x5849300) returned 1 [0141.062] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x53 [0141.062] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0141.063] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.063] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0141.063] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.063] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0141.063] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x53 [0141.063] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0141.063] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.064] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0141.064] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0141.064] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0141.064] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0141.064] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849080 [0141.064] FindNextFileW (in: hFindFile=0x5849080, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.064] FindNextFileW (in: hFindFile=0x5849080, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0141.064] FindNextFileW (in: hFindFile=0x5849080, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.064] FindClose (in: hFindFile=0x5849080 | out: hFindFile=0x5849080) returned 1 [0141.065] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0141.065] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849000 [0141.065] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.065] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0141.065] FindNextFileW (in: hFindFile=0x5849000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0141.065] FindClose (in: hFindFile=0x5849000 | out: hFindFile=0x5849000) returned 1 [0141.065] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x73 [0141.065] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849480 [0141.065] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x5849480, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0141.066] FindClose (in: hFindFile=0x5849480 | out: hFindFile=0x5849480) returned 1 [0141.066] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x73 [0141.066] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849540 [0141.066] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0141.066] FindNextFileW (in: hFindFile=0x5849540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.066] FindClose (in: hFindFile=0x5849540 | out: hFindFile=0x5849540) returned 1 [0141.066] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x53 [0141.067] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849080 [0141.067] FindNextFileW (in: hFindFile=0x5849080, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.177] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x3c [0141.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.177] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0141.178] GetFileType (hFile=0x78c) returned 0x1 [0141.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.178] GetFileType (hFile=0x78c) returned 0x1 [0141.178] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.P4WN3D", lpFilePart=0x0) returned 0x43 [0141.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.178] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0141.181] GetFileType (hFile=0x788) returned 0x1 [0141.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.181] GetFileType (hFile=0x788) returned 0x1 [0141.181] SetEndOfFile (hFile=0x788) returned 1 [0141.181] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x93038 [0141.181] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.183] WriteFile (in: hFile=0x788, lpBuffer=0x2a773dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a773dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.185] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.186] WriteFile (in: hFile=0x788, lpBuffer=0x2a783e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a783e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.186] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.186] WriteFile (in: hFile=0x788, lpBuffer=0x2a793f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a793f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.187] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.187] WriteFile (in: hFile=0x788, lpBuffer=0x2a7a400*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7a400*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.188] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.188] WriteFile (in: hFile=0x788, lpBuffer=0x2a7b40c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7b40c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.188] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.188] WriteFile (in: hFile=0x788, lpBuffer=0x2a7c418*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7c418*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.188] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.189] WriteFile (in: hFile=0x788, lpBuffer=0x2a7d424*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7d424*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.189] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.189] WriteFile (in: hFile=0x788, lpBuffer=0x2a7e430*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7e430*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.189] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.190] WriteFile (in: hFile=0x788, lpBuffer=0x2a7f43c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7f43c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.190] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.190] WriteFile (in: hFile=0x788, lpBuffer=0x2a80448*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a80448*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.191] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.191] WriteFile (in: hFile=0x788, lpBuffer=0x2a81454*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a81454*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.191] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.191] WriteFile (in: hFile=0x788, lpBuffer=0x2a82460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a82460*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.192] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.192] WriteFile (in: hFile=0x788, lpBuffer=0x2a8346c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8346c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.192] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.192] WriteFile (in: hFile=0x788, lpBuffer=0x2a84478*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a84478*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.192] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.194] WriteFile (in: hFile=0x788, lpBuffer=0x2a85484*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a85484*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.194] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.195] WriteFile (in: hFile=0x788, lpBuffer=0x2a86490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a86490*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.195] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.195] WriteFile (in: hFile=0x788, lpBuffer=0x2a8749c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8749c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.195] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.195] WriteFile (in: hFile=0x788, lpBuffer=0x2a884a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a884a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.196] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.196] WriteFile (in: hFile=0x788, lpBuffer=0x2a894b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a894b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.196] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.196] WriteFile (in: hFile=0x788, lpBuffer=0x2a8a4c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8a4c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.196] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.197] WriteFile (in: hFile=0x788, lpBuffer=0x2a8b4cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8b4cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.197] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.197] WriteFile (in: hFile=0x788, lpBuffer=0x2a8c4d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8c4d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.197] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.197] WriteFile (in: hFile=0x788, lpBuffer=0x2a8d4e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8d4e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.199] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.199] WriteFile (in: hFile=0x788, lpBuffer=0x2a8e4f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8e4f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.199] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.200] WriteFile (in: hFile=0x788, lpBuffer=0x2a8f4fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a8f4fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.200] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.200] WriteFile (in: hFile=0x788, lpBuffer=0x2a90508*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a90508*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.200] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.200] WriteFile (in: hFile=0x788, lpBuffer=0x2a91514*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a91514*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.201] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.201] WriteFile (in: hFile=0x788, lpBuffer=0x2a92520*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a92520*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.201] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.201] WriteFile (in: hFile=0x788, lpBuffer=0x2a9352c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9352c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.201] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.201] WriteFile (in: hFile=0x788, lpBuffer=0x2a94538*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a94538*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.202] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.202] WriteFile (in: hFile=0x788, lpBuffer=0x2a95544*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a95544*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.202] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.202] WriteFile (in: hFile=0x788, lpBuffer=0x2a96550*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a96550*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.202] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.203] WriteFile (in: hFile=0x788, lpBuffer=0x2a9755c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9755c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.203] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.203] WriteFile (in: hFile=0x788, lpBuffer=0x2a98568*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a98568*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.203] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.203] WriteFile (in: hFile=0x788, lpBuffer=0x2a99574*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a99574*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.204] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.204] WriteFile (in: hFile=0x788, lpBuffer=0x2a9a580*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9a580*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.204] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.204] WriteFile (in: hFile=0x788, lpBuffer=0x2a9b58c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9b58c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.204] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.205] WriteFile (in: hFile=0x788, lpBuffer=0x2a9c598*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9c598*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.205] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.205] WriteFile (in: hFile=0x788, lpBuffer=0x2a9d5a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9d5a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.205] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.205] WriteFile (in: hFile=0x788, lpBuffer=0x2a9e5b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9e5b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.206] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.206] WriteFile (in: hFile=0x788, lpBuffer=0x2a9f5bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a9f5bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.206] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.206] WriteFile (in: hFile=0x788, lpBuffer=0x2aa05c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa05c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.206] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.206] WriteFile (in: hFile=0x788, lpBuffer=0x2aa15d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa15d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.207] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.247] WriteFile (in: hFile=0x788, lpBuffer=0x2aa25e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa25e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.248] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.248] WriteFile (in: hFile=0x788, lpBuffer=0x2aa35ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa35ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.248] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.248] WriteFile (in: hFile=0x788, lpBuffer=0x2aa45f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa45f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.248] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.250] WriteFile (in: hFile=0x788, lpBuffer=0x2aa5604*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa5604*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.250] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.250] WriteFile (in: hFile=0x788, lpBuffer=0x2aa6610*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa6610*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.251] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.251] WriteFile (in: hFile=0x788, lpBuffer=0x2aa761c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa761c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.251] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.251] WriteFile (in: hFile=0x788, lpBuffer=0x2aa8628*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa8628*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.252] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.252] WriteFile (in: hFile=0x788, lpBuffer=0x2aa9634*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aa9634*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.252] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.252] WriteFile (in: hFile=0x788, lpBuffer=0x2aaa640*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aaa640*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.253] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.253] WriteFile (in: hFile=0x788, lpBuffer=0x2aab64c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aab64c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.253] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.253] WriteFile (in: hFile=0x788, lpBuffer=0x2aac658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aac658*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.254] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.254] WriteFile (in: hFile=0x788, lpBuffer=0x2aad664*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aad664*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.254] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.254] WriteFile (in: hFile=0x788, lpBuffer=0x2aae670*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aae670*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.255] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.255] WriteFile (in: hFile=0x788, lpBuffer=0x2aaf67c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aaf67c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.255] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.255] WriteFile (in: hFile=0x788, lpBuffer=0x2ab0688*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab0688*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.256] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.256] WriteFile (in: hFile=0x788, lpBuffer=0x2ab1694*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab1694*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.256] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.257] WriteFile (in: hFile=0x788, lpBuffer=0x2ab26a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab26a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.257] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.257] WriteFile (in: hFile=0x788, lpBuffer=0x2ab36ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab36ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.257] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.258] WriteFile (in: hFile=0x788, lpBuffer=0x2ab46b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab46b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.258] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.258] WriteFile (in: hFile=0x788, lpBuffer=0x2ab56c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab56c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.258] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.259] WriteFile (in: hFile=0x788, lpBuffer=0x2ab66d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab66d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.259] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.259] WriteFile (in: hFile=0x788, lpBuffer=0x2ab76dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab76dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.261] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.261] WriteFile (in: hFile=0x788, lpBuffer=0x2ab86e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab86e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.261] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.261] WriteFile (in: hFile=0x788, lpBuffer=0x2ab96f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ab96f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.262] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.262] WriteFile (in: hFile=0x788, lpBuffer=0x2aba700*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aba700*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.278] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.279] WriteFile (in: hFile=0x788, lpBuffer=0x2abb70c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abb70c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.279] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.279] WriteFile (in: hFile=0x788, lpBuffer=0x2abc718*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abc718*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.279] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.280] WriteFile (in: hFile=0x788, lpBuffer=0x2abd724*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abd724*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.280] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.280] WriteFile (in: hFile=0x788, lpBuffer=0x2abe730*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abe730*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.280] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.281] WriteFile (in: hFile=0x788, lpBuffer=0x2abf73c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2abf73c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.281] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.281] WriteFile (in: hFile=0x788, lpBuffer=0x2ac0748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac0748*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.282] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.282] WriteFile (in: hFile=0x788, lpBuffer=0x2ac1754*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac1754*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.282] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.282] WriteFile (in: hFile=0x788, lpBuffer=0x2ac2760*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac2760*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.283] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.283] WriteFile (in: hFile=0x788, lpBuffer=0x2ac376c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac376c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.283] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.283] WriteFile (in: hFile=0x788, lpBuffer=0x2ac4778*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac4778*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.284] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.288] WriteFile (in: hFile=0x788, lpBuffer=0x2ac5784*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac5784*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.289] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.289] WriteFile (in: hFile=0x788, lpBuffer=0x2ac6790*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac6790*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.289] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.292] WriteFile (in: hFile=0x788, lpBuffer=0x2ac779c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac779c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.293] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.295] WriteFile (in: hFile=0x788, lpBuffer=0x2ac87a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac87a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.295] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.296] WriteFile (in: hFile=0x788, lpBuffer=0x2ac97b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ac97b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.296] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.296] WriteFile (in: hFile=0x788, lpBuffer=0x2aca7c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aca7c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.297] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.297] WriteFile (in: hFile=0x788, lpBuffer=0x2acb7cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acb7cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.297] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.298] WriteFile (in: hFile=0x788, lpBuffer=0x2acc7d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acc7d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.298] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.298] WriteFile (in: hFile=0x788, lpBuffer=0x2acd7e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acd7e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.298] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.299] WriteFile (in: hFile=0x788, lpBuffer=0x2ace7f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ace7f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.299] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.299] WriteFile (in: hFile=0x788, lpBuffer=0x2acf7fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2acf7fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.300] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.300] WriteFile (in: hFile=0x788, lpBuffer=0x2ad0808*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad0808*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.300] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.301] WriteFile (in: hFile=0x788, lpBuffer=0x2ad1814*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad1814*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.301] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.301] WriteFile (in: hFile=0x788, lpBuffer=0x2ad2820*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad2820*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.301] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.302] WriteFile (in: hFile=0x788, lpBuffer=0x2ad382c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad382c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.302] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.302] WriteFile (in: hFile=0x788, lpBuffer=0x2ad4838*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad4838*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.302] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.303] WriteFile (in: hFile=0x788, lpBuffer=0x2ad5844*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad5844*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.303] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.304] WriteFile (in: hFile=0x788, lpBuffer=0x2ad6850*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad6850*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.304] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.304] WriteFile (in: hFile=0x788, lpBuffer=0x2ad785c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad785c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.305] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.305] WriteFile (in: hFile=0x788, lpBuffer=0x2ad8868*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad8868*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.305] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.306] WriteFile (in: hFile=0x788, lpBuffer=0x2ad9874*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ad9874*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.306] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.306] WriteFile (in: hFile=0x788, lpBuffer=0x2ada880*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ada880*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.307] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.307] WriteFile (in: hFile=0x788, lpBuffer=0x2adb88c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2adb88c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.307] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.307] WriteFile (in: hFile=0x788, lpBuffer=0x2adc898*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2adc898*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.308] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.308] WriteFile (in: hFile=0x788, lpBuffer=0x2add8a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2add8a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.308] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.309] WriteFile (in: hFile=0x788, lpBuffer=0x2ade8b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ade8b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.363] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.363] WriteFile (in: hFile=0x788, lpBuffer=0x2adf8bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2adf8bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.363] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.364] WriteFile (in: hFile=0x788, lpBuffer=0x2ae08c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae08c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.364] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.364] WriteFile (in: hFile=0x788, lpBuffer=0x2ae18d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae18d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.365] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.365] WriteFile (in: hFile=0x788, lpBuffer=0x2ae28e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae28e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.365] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.365] WriteFile (in: hFile=0x788, lpBuffer=0x2ae38ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae38ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.366] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.366] WriteFile (in: hFile=0x788, lpBuffer=0x2ae48f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae48f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.366] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.367] WriteFile (in: hFile=0x788, lpBuffer=0x2ae5904*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae5904*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.368] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.368] WriteFile (in: hFile=0x788, lpBuffer=0x2ae6910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae6910*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.368] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.369] WriteFile (in: hFile=0x788, lpBuffer=0x2ae791c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae791c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.369] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.369] WriteFile (in: hFile=0x788, lpBuffer=0x2ae8928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae8928*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.369] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.370] WriteFile (in: hFile=0x788, lpBuffer=0x2ae9934*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ae9934*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.370] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.370] WriteFile (in: hFile=0x788, lpBuffer=0x2aea940*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aea940*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.371] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.371] WriteFile (in: hFile=0x788, lpBuffer=0x2aeb94c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aeb94c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.371] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.372] WriteFile (in: hFile=0x788, lpBuffer=0x2aec958*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aec958*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.372] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.372] WriteFile (in: hFile=0x788, lpBuffer=0x2aed964*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aed964*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.372] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.373] WriteFile (in: hFile=0x788, lpBuffer=0x2aee970*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aee970*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.373] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.373] WriteFile (in: hFile=0x788, lpBuffer=0x2aef97c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2aef97c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.373] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.374] WriteFile (in: hFile=0x788, lpBuffer=0x2af0988*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af0988*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.374] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.374] WriteFile (in: hFile=0x788, lpBuffer=0x2af1994*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af1994*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.375] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.375] WriteFile (in: hFile=0x788, lpBuffer=0x2af29a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af29a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.375] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.375] WriteFile (in: hFile=0x788, lpBuffer=0x2af39ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af39ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.376] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.376] WriteFile (in: hFile=0x788, lpBuffer=0x2af49b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af49b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.376] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.376] WriteFile (in: hFile=0x788, lpBuffer=0x2af59c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af59c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.377] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.377] WriteFile (in: hFile=0x788, lpBuffer=0x2af69d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af69d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.377] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.377] WriteFile (in: hFile=0x788, lpBuffer=0x2af79dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af79dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.379] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.379] WriteFile (in: hFile=0x788, lpBuffer=0x2af89e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af89e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.379] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.380] WriteFile (in: hFile=0x788, lpBuffer=0x2af99f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2af99f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.380] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.381] WriteFile (in: hFile=0x788, lpBuffer=0x2afaa00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afaa00*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.381] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.381] WriteFile (in: hFile=0x788, lpBuffer=0x2afba0c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afba0c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.381] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.382] WriteFile (in: hFile=0x788, lpBuffer=0x2afca18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afca18*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.382] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.382] WriteFile (in: hFile=0x788, lpBuffer=0x2afda24*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afda24*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.382] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.383] WriteFile (in: hFile=0x788, lpBuffer=0x2afea30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2afea30*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.383] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.383] WriteFile (in: hFile=0x788, lpBuffer=0x2affa3c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2affa3c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.384] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.384] WriteFile (in: hFile=0x788, lpBuffer=0x2b00a48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b00a48*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.384] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.384] WriteFile (in: hFile=0x788, lpBuffer=0x2b01a54*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b01a54*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.385] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.385] WriteFile (in: hFile=0x788, lpBuffer=0x2b02a60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b02a60*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.385] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.386] WriteFile (in: hFile=0x788, lpBuffer=0x2b03a6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b03a6c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.386] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.386] WriteFile (in: hFile=0x788, lpBuffer=0x2b04a78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b04a78*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.386] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.387] WriteFile (in: hFile=0x788, lpBuffer=0x2b05a84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b05a84*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.387] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.387] WriteFile (in: hFile=0x788, lpBuffer=0x2b06a90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b06a90*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.388] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.388] WriteFile (in: hFile=0x788, lpBuffer=0x2b07a9c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b07a9c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.388] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.388] WriteFile (in: hFile=0x788, lpBuffer=0x2b08aa8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b08aa8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.389] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.389] WriteFile (in: hFile=0x788, lpBuffer=0x2b09ab4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b09ab4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.389] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75f8c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75f8c*, lpNumberOfBytesRead=0xb3f1fc*=0x38, lpOverlapped=0x0) returned 1 [0141.389] WriteFile (in: hFile=0x788, lpBuffer=0x2b0aafc*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b0aafc*, lpNumberOfBytesWritten=0xb3f1b4*=0x40, lpOverlapped=0x0) returned 1 [0141.390] CloseHandle (hObject=0x788) returned 1 [0141.467] CloseHandle (hObject=0x78c) returned 1 [0141.470] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x3c [0141.470] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp")) returned 1 [0141.484] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png", lpFilePart=0x0) returned 0x3c [0141.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.484] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0141.485] GetFileType (hFile=0x78c) returned 0x1 [0141.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.485] GetFileType (hFile=0x78c) returned 0x1 [0141.485] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png.P4WN3D", lpFilePart=0x0) returned 0x43 [0141.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.485] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0141.486] GetFileType (hFile=0x788) returned 0x1 [0141.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.486] GetFileType (hFile=0x788) returned 0x1 [0141.486] SetEndOfFile (hFile=0x788) returned 1 [0141.486] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1518 [0141.486] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0c8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0c8d8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.537] WriteFile (in: hFile=0x788, lpBuffer=0x2b0dd28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b0dd28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.538] ReadFile (in: hFile=0x78c, lpBuffer=0x2b0c8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b0c8d8*, lpNumberOfBytesRead=0xb3f1fc*=0x518, lpOverlapped=0x0) returned 1 [0141.539] WriteFile (in: hFile=0x788, lpBuffer=0x2b0f250*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b0f250*, lpNumberOfBytesWritten=0xb3f1b4*=0x520, lpOverlapped=0x0) returned 1 [0141.539] CloseHandle (hObject=0x788) returned 1 [0141.541] CloseHandle (hObject=0x78c) returned 1 [0141.546] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png", lpFilePart=0x0) returned 0x3c [0141.546] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.png")) returned 1 [0141.551] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png", lpFilePart=0x0) returned 0x3f [0141.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.551] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0141.553] GetFileType (hFile=0x78c) returned 0x1 [0141.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.554] GetFileType (hFile=0x78c) returned 0x1 [0141.554] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png.P4WN3D", lpFilePart=0x0) returned 0x46 [0141.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.554] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0141.554] GetFileType (hFile=0x788) returned 0x1 [0141.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.554] GetFileType (hFile=0x788) returned 0x1 [0141.555] SetEndOfFile (hFile=0x788) returned 1 [0141.555] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x967 [0141.555] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1104c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1104c*, lpNumberOfBytesRead=0xb3f1fc*=0x967, lpOverlapped=0x0) returned 1 [0141.561] WriteFile (in: hFile=0x788, lpBuffer=0x2b12e08*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b12e08*, lpNumberOfBytesWritten=0xb3f1b4*=0x970, lpOverlapped=0x0) returned 1 [0141.563] CloseHandle (hObject=0x788) returned 1 [0141.569] CloseHandle (hObject=0x78c) returned 1 [0141.571] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png", lpFilePart=0x0) returned 0x3f [0141.571] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-192.png")) returned 1 [0141.625] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png", lpFilePart=0x0) returned 0x3e [0141.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.625] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0141.627] GetFileType (hFile=0x78c) returned 0x1 [0141.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.627] GetFileType (hFile=0x78c) returned 0x1 [0141.627] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png.P4WN3D", lpFilePart=0x0) returned 0x45 [0141.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.627] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0141.628] GetFileType (hFile=0x788) returned 0x1 [0141.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.628] GetFileType (hFile=0x788) returned 0x1 [0141.628] SetEndOfFile (hFile=0x788) returned 1 [0141.628] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x19f [0141.629] ReadFile (in: hFile=0x78c, lpBuffer=0x2b14c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b14c08*, lpNumberOfBytesRead=0xb3f1fc*=0x19f, lpOverlapped=0x0) returned 1 [0141.630] WriteFile (in: hFile=0x788, lpBuffer=0x2b161f4*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b161f4*, lpNumberOfBytesWritten=0xb3f1b4*=0x1a0, lpOverlapped=0x0) returned 1 [0141.632] CloseHandle (hObject=0x788) returned 1 [0141.640] CloseHandle (hObject=0x78c) returned 1 [0141.643] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png", lpFilePart=0x0) returned 0x3e [0141.643] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-32.png")) returned 1 [0141.648] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png", lpFilePart=0x0) returned 0x3e [0141.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.648] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0141.649] GetFileType (hFile=0x78c) returned 0x1 [0141.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.649] GetFileType (hFile=0x78c) returned 0x1 [0141.649] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png.P4WN3D", lpFilePart=0x0) returned 0x45 [0141.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.649] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0141.650] GetFileType (hFile=0x788) returned 0x1 [0141.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.650] GetFileType (hFile=0x788) returned 0x1 [0141.650] SetEndOfFile (hFile=0x788) returned 1 [0141.650] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1b1 [0141.650] ReadFile (in: hFile=0x78c, lpBuffer=0x2b17fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b17fe8*, lpNumberOfBytesRead=0xb3f1fc*=0x1b1, lpOverlapped=0x0) returned 1 [0141.652] WriteFile (in: hFile=0x788, lpBuffer=0x2b195f4*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b195f4*, lpNumberOfBytesWritten=0xb3f1b4*=0x1c0, lpOverlapped=0x0) returned 1 [0141.654] CloseHandle (hObject=0x788) returned 1 [0141.655] CloseHandle (hObject=0x78c) returned 1 [0141.658] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png", lpFilePart=0x0) returned 0x3e [0141.658] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-40.png")) returned 1 [0141.663] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png", lpFilePart=0x0) returned 0x3e [0141.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.663] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0141.663] GetFileType (hFile=0x78c) returned 0x1 [0141.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.663] GetFileType (hFile=0x78c) returned 0x1 [0141.663] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png.P4WN3D", lpFilePart=0x0) returned 0x45 [0141.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.663] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0141.664] GetFileType (hFile=0x788) returned 0x1 [0141.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.664] GetFileType (hFile=0x788) returned 0x1 [0141.664] SetEndOfFile (hFile=0x788) returned 1 [0141.664] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1f5 [0141.665] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1b3f4, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1b3f4*, lpNumberOfBytesRead=0xb3f1fc*=0x1f5, lpOverlapped=0x0) returned 1 [0141.666] WriteFile (in: hFile=0x788, lpBuffer=0x2b1ca40*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b1ca40*, lpNumberOfBytesWritten=0xb3f1b4*=0x200, lpOverlapped=0x0) returned 1 [0141.667] CloseHandle (hObject=0x788) returned 1 [0141.983] CloseHandle (hObject=0x78c) returned 1 [0141.985] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png", lpFilePart=0x0) returned 0x3e [0141.985] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user-48.png")) returned 1 [0141.990] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x3b [0141.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.990] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0141.991] GetFileType (hFile=0x78c) returned 0x1 [0141.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.991] GetFileType (hFile=0x78c) returned 0x1 [0141.991] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.P4WN3D", lpFilePart=0x0) returned 0x42 [0141.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0141.991] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0141.991] GetFileType (hFile=0x788) returned 0x1 [0141.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0141.991] GetFileType (hFile=0x788) returned 0x1 [0141.991] SetEndOfFile (hFile=0x788) returned 1 [0141.992] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x93038 [0141.992] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.994] WriteFile (in: hFile=0x788, lpBuffer=0x2b1fc70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b1fc70*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.997] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.997] WriteFile (in: hFile=0x788, lpBuffer=0x2b20c7c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b20c7c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.998] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.998] WriteFile (in: hFile=0x788, lpBuffer=0x2b21c88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b21c88*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.999] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.999] WriteFile (in: hFile=0x788, lpBuffer=0x2b22c94*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b22c94*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0141.999] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0141.999] WriteFile (in: hFile=0x788, lpBuffer=0x2b23ca0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b23ca0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.000] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.000] WriteFile (in: hFile=0x788, lpBuffer=0x2b24cac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b24cac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.000] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.001] WriteFile (in: hFile=0x788, lpBuffer=0x2b25cb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b25cb8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.001] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.001] WriteFile (in: hFile=0x788, lpBuffer=0x2b26cc4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b26cc4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.001] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.002] WriteFile (in: hFile=0x788, lpBuffer=0x2b27cd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b27cd0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.002] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.002] WriteFile (in: hFile=0x788, lpBuffer=0x2b28cdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b28cdc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.002] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.003] WriteFile (in: hFile=0x788, lpBuffer=0x2b29ce8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b29ce8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.003] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.003] WriteFile (in: hFile=0x788, lpBuffer=0x2b2acf4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2acf4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.003] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.004] WriteFile (in: hFile=0x788, lpBuffer=0x2b2bd00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2bd00*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.004] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.004] WriteFile (in: hFile=0x788, lpBuffer=0x2b2cd0c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2cd0c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.005] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.007] WriteFile (in: hFile=0x788, lpBuffer=0x2b2dd18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2dd18*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.007] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.007] WriteFile (in: hFile=0x788, lpBuffer=0x2b2ed24*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2ed24*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.008] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.008] WriteFile (in: hFile=0x788, lpBuffer=0x2b2fd30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b2fd30*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.008] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.008] WriteFile (in: hFile=0x788, lpBuffer=0x2b30d3c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b30d3c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.009] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.010] WriteFile (in: hFile=0x788, lpBuffer=0x2b31d48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b31d48*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.010] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.010] WriteFile (in: hFile=0x788, lpBuffer=0x2b32d54*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b32d54*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.011] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.011] WriteFile (in: hFile=0x788, lpBuffer=0x2b33d60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b33d60*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.011] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.011] WriteFile (in: hFile=0x788, lpBuffer=0x2b34d6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b34d6c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.012] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.012] WriteFile (in: hFile=0x788, lpBuffer=0x2b35d78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b35d78*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.012] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.013] WriteFile (in: hFile=0x788, lpBuffer=0x2b36d84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b36d84*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.013] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.013] WriteFile (in: hFile=0x788, lpBuffer=0x2b37d90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b37d90*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.013] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.014] WriteFile (in: hFile=0x788, lpBuffer=0x2b38d9c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b38d9c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.014] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.014] WriteFile (in: hFile=0x788, lpBuffer=0x2b39da8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b39da8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.014] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.015] WriteFile (in: hFile=0x788, lpBuffer=0x2b3adb4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3adb4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.015] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.015] WriteFile (in: hFile=0x788, lpBuffer=0x2b3bdc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3bdc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.015] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.016] WriteFile (in: hFile=0x788, lpBuffer=0x2b3cdcc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3cdcc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.016] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.016] WriteFile (in: hFile=0x788, lpBuffer=0x2b3ddd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3ddd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.016] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.017] WriteFile (in: hFile=0x788, lpBuffer=0x2b3ede4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3ede4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.017] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.017] WriteFile (in: hFile=0x788, lpBuffer=0x2b3fdf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b3fdf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.018] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.018] WriteFile (in: hFile=0x788, lpBuffer=0x2b40dfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b40dfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.019] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.019] WriteFile (in: hFile=0x788, lpBuffer=0x2b41e08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b41e08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.020] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.020] WriteFile (in: hFile=0x788, lpBuffer=0x2b42e14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b42e14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.020] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.021] WriteFile (in: hFile=0x788, lpBuffer=0x2b43e20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b43e20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.021] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.021] WriteFile (in: hFile=0x788, lpBuffer=0x2b44e2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b44e2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.021] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.022] WriteFile (in: hFile=0x788, lpBuffer=0x2b45e38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b45e38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.022] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.022] WriteFile (in: hFile=0x788, lpBuffer=0x2b46e44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b46e44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.022] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.023] WriteFile (in: hFile=0x788, lpBuffer=0x2b47e50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b47e50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.023] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.023] WriteFile (in: hFile=0x788, lpBuffer=0x2b48e5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b48e5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.023] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.024] WriteFile (in: hFile=0x788, lpBuffer=0x2b49e68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b49e68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.024] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.024] WriteFile (in: hFile=0x788, lpBuffer=0x2b4ae74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4ae74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.025] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.025] WriteFile (in: hFile=0x788, lpBuffer=0x2b4be80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4be80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.025] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.025] WriteFile (in: hFile=0x788, lpBuffer=0x2b4ce8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4ce8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.026] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.081] WriteFile (in: hFile=0x788, lpBuffer=0x2b4de98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4de98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.081] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.081] WriteFile (in: hFile=0x788, lpBuffer=0x2b4eea4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4eea4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.082] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.082] WriteFile (in: hFile=0x788, lpBuffer=0x2b4feb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4feb0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.082] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.082] WriteFile (in: hFile=0x788, lpBuffer=0x2b50ebc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b50ebc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.083] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.083] WriteFile (in: hFile=0x788, lpBuffer=0x2b51ec8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b51ec8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.083] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.084] WriteFile (in: hFile=0x788, lpBuffer=0x2b52ed4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b52ed4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.084] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.084] WriteFile (in: hFile=0x788, lpBuffer=0x2b53ee0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b53ee0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.084] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.085] WriteFile (in: hFile=0x788, lpBuffer=0x2b54eec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b54eec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.085] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.085] WriteFile (in: hFile=0x788, lpBuffer=0x2b55ef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b55ef8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.085] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.086] WriteFile (in: hFile=0x788, lpBuffer=0x2b56f04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b56f04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.086] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.086] WriteFile (in: hFile=0x788, lpBuffer=0x2b57f10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b57f10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.086] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.087] WriteFile (in: hFile=0x788, lpBuffer=0x2b58f1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b58f1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.087] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.087] WriteFile (in: hFile=0x788, lpBuffer=0x2b59f28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b59f28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.087] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.088] WriteFile (in: hFile=0x788, lpBuffer=0x2b5af34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5af34*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.088] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.088] WriteFile (in: hFile=0x788, lpBuffer=0x2b5bf40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5bf40*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.089] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.089] WriteFile (in: hFile=0x788, lpBuffer=0x2b5cf4c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5cf4c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.089] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.090] WriteFile (in: hFile=0x788, lpBuffer=0x2b5df58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5df58*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.090] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.090] WriteFile (in: hFile=0x788, lpBuffer=0x2b5ef64*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5ef64*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.091] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.091] WriteFile (in: hFile=0x788, lpBuffer=0x2b5ff70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5ff70*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.093] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.093] WriteFile (in: hFile=0x788, lpBuffer=0x2b60f7c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b60f7c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.093] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.093] WriteFile (in: hFile=0x788, lpBuffer=0x2b61f88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b61f88*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.094] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.094] WriteFile (in: hFile=0x788, lpBuffer=0x2b62f94*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b62f94*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.094] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.095] WriteFile (in: hFile=0x788, lpBuffer=0x2b63fa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b63fa0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.095] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.095] WriteFile (in: hFile=0x788, lpBuffer=0x2b64fac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b64fac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.095] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.096] WriteFile (in: hFile=0x788, lpBuffer=0x2b65fb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b65fb8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.096] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.096] WriteFile (in: hFile=0x788, lpBuffer=0x2b66fc4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b66fc4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.096] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.097] WriteFile (in: hFile=0x788, lpBuffer=0x2b67fd0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b67fd0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.097] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.097] WriteFile (in: hFile=0x788, lpBuffer=0x2b68fdc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b68fdc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.098] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.098] WriteFile (in: hFile=0x788, lpBuffer=0x2b69fe8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b69fe8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.098] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.098] WriteFile (in: hFile=0x788, lpBuffer=0x2b6aff4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6aff4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.099] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.099] WriteFile (in: hFile=0x788, lpBuffer=0x2b6c000*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6c000*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.099] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.100] WriteFile (in: hFile=0x788, lpBuffer=0x2b6d00c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6d00c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.100] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.102] WriteFile (in: hFile=0x788, lpBuffer=0x2b6e018*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6e018*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.102] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.103] WriteFile (in: hFile=0x788, lpBuffer=0x2b6f024*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6f024*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.103] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.103] WriteFile (in: hFile=0x788, lpBuffer=0x2b70030*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b70030*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.103] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.104] WriteFile (in: hFile=0x788, lpBuffer=0x2b7103c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7103c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.104] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.104] WriteFile (in: hFile=0x788, lpBuffer=0x2b72048*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b72048*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.104] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.105] WriteFile (in: hFile=0x788, lpBuffer=0x2b73054*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b73054*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.105] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.105] WriteFile (in: hFile=0x788, lpBuffer=0x2b74060*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b74060*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.105] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.106] WriteFile (in: hFile=0x788, lpBuffer=0x2b7506c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7506c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.106] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.106] WriteFile (in: hFile=0x788, lpBuffer=0x2b76078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b76078*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.106] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.107] WriteFile (in: hFile=0x788, lpBuffer=0x2b77084*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b77084*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.107] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.107] WriteFile (in: hFile=0x788, lpBuffer=0x2b78090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b78090*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.107] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.108] WriteFile (in: hFile=0x788, lpBuffer=0x2b7909c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7909c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.108] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.108] WriteFile (in: hFile=0x788, lpBuffer=0x2b7a0a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7a0a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.109] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.109] WriteFile (in: hFile=0x788, lpBuffer=0x2b7b0b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7b0b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.109] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.109] WriteFile (in: hFile=0x788, lpBuffer=0x2b7c0c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7c0c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.110] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.110] WriteFile (in: hFile=0x788, lpBuffer=0x2b7d0cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7d0cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.110] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.110] WriteFile (in: hFile=0x788, lpBuffer=0x2b7e0d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7e0d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.111] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.111] WriteFile (in: hFile=0x788, lpBuffer=0x2b7f0e4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b7f0e4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.111] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.111] WriteFile (in: hFile=0x788, lpBuffer=0x2b800f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b800f0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.112] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.112] WriteFile (in: hFile=0x788, lpBuffer=0x2b810fc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b810fc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.112] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.112] WriteFile (in: hFile=0x788, lpBuffer=0x2b82108*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b82108*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.113] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.113] WriteFile (in: hFile=0x788, lpBuffer=0x2b83114*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b83114*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.113] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.113] WriteFile (in: hFile=0x788, lpBuffer=0x2b84120*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b84120*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.114] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.114] WriteFile (in: hFile=0x788, lpBuffer=0x2b8512c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8512c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.114] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.115] WriteFile (in: hFile=0x788, lpBuffer=0x2b86138*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b86138*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.115] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.115] WriteFile (in: hFile=0x788, lpBuffer=0x2b87144*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b87144*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.115] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.116] WriteFile (in: hFile=0x788, lpBuffer=0x2b88150*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b88150*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.116] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.116] WriteFile (in: hFile=0x788, lpBuffer=0x2b8915c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8915c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.116] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.117] WriteFile (in: hFile=0x788, lpBuffer=0x2b8a168*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8a168*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.117] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.117] WriteFile (in: hFile=0x788, lpBuffer=0x2b8b174*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8b174*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.117] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.117] WriteFile (in: hFile=0x788, lpBuffer=0x2b8c180*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8c180*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.118] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.118] WriteFile (in: hFile=0x788, lpBuffer=0x2b8d18c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8d18c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.118] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.201] WriteFile (in: hFile=0x788, lpBuffer=0x2b8e198*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8e198*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.201] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.201] WriteFile (in: hFile=0x788, lpBuffer=0x2b8f1a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b8f1a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.202] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.202] WriteFile (in: hFile=0x788, lpBuffer=0x2b901b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b901b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.202] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.203] WriteFile (in: hFile=0x788, lpBuffer=0x2b911bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b911bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.203] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.203] WriteFile (in: hFile=0x788, lpBuffer=0x2b921c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b921c8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.204] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.204] WriteFile (in: hFile=0x788, lpBuffer=0x2b931d4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b931d4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.204] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.204] WriteFile (in: hFile=0x788, lpBuffer=0x2b941e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b941e0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.205] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.205] WriteFile (in: hFile=0x788, lpBuffer=0x2b951ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b951ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.205] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.205] WriteFile (in: hFile=0x788, lpBuffer=0x2b961f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b961f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.205] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.206] WriteFile (in: hFile=0x788, lpBuffer=0x2b97204*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b97204*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.206] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.206] WriteFile (in: hFile=0x788, lpBuffer=0x2b98210*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b98210*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.206] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.207] WriteFile (in: hFile=0x788, lpBuffer=0x2b9921c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9921c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.207] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.207] WriteFile (in: hFile=0x788, lpBuffer=0x2b9a228*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9a228*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.207] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.207] WriteFile (in: hFile=0x788, lpBuffer=0x2b9b234*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9b234*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.207] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.208] WriteFile (in: hFile=0x788, lpBuffer=0x2b9c240*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9c240*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.208] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.208] WriteFile (in: hFile=0x788, lpBuffer=0x2b9d24c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9d24c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.208] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.209] WriteFile (in: hFile=0x788, lpBuffer=0x2b9e258*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9e258*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.209] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.209] WriteFile (in: hFile=0x788, lpBuffer=0x2b9f264*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b9f264*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.209] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.209] WriteFile (in: hFile=0x788, lpBuffer=0x2ba0270*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba0270*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.210] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.210] WriteFile (in: hFile=0x788, lpBuffer=0x2ba127c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba127c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.210] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.211] WriteFile (in: hFile=0x788, lpBuffer=0x2ba2288*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba2288*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.211] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.211] WriteFile (in: hFile=0x788, lpBuffer=0x2ba3294*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba3294*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.211] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.212] WriteFile (in: hFile=0x788, lpBuffer=0x2ba42a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba42a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.212] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.212] WriteFile (in: hFile=0x788, lpBuffer=0x2ba52ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba52ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.212] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.212] WriteFile (in: hFile=0x788, lpBuffer=0x2ba62b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba62b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.212] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.213] WriteFile (in: hFile=0x788, lpBuffer=0x2ba72c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba72c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.213] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.213] WriteFile (in: hFile=0x788, lpBuffer=0x2ba82d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba82d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.213] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.213] WriteFile (in: hFile=0x788, lpBuffer=0x2ba92dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2ba92dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.214] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.214] WriteFile (in: hFile=0x788, lpBuffer=0x2baa2e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2baa2e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.214] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.214] WriteFile (in: hFile=0x788, lpBuffer=0x2bab2f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bab2f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.214] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.215] WriteFile (in: hFile=0x788, lpBuffer=0x2bac300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bac300*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.215] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.215] WriteFile (in: hFile=0x788, lpBuffer=0x2bad30c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bad30c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.215] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.216] WriteFile (in: hFile=0x788, lpBuffer=0x2bae318*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bae318*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.216] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.216] WriteFile (in: hFile=0x788, lpBuffer=0x2baf324*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2baf324*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.216] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.216] WriteFile (in: hFile=0x788, lpBuffer=0x2bb0330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb0330*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.217] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.217] WriteFile (in: hFile=0x788, lpBuffer=0x2bb133c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb133c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.217] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.217] WriteFile (in: hFile=0x788, lpBuffer=0x2bb2348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb2348*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.217] ReadFile (in: hFile=0x78c, lpBuffer=0x2b1e820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b1e820*, lpNumberOfBytesRead=0xb3f1fc*=0x38, lpOverlapped=0x0) returned 1 [0142.218] WriteFile (in: hFile=0x788, lpBuffer=0x2bb3390*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bb3390*, lpNumberOfBytesWritten=0xb3f1b4*=0x40, lpOverlapped=0x0) returned 1 [0142.218] CloseHandle (hObject=0x788) returned 1 [0142.230] CloseHandle (hObject=0x78c) returned 1 [0142.232] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x3b [0142.232] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp")) returned 1 [0142.240] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png", lpFilePart=0x0) returned 0x3b [0142.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0142.241] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0142.241] GetFileType (hFile=0x78c) returned 0x1 [0142.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0142.241] GetFileType (hFile=0x78c) returned 0x1 [0142.241] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png.P4WN3D", lpFilePart=0x0) returned 0x42 [0142.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0142.241] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0142.242] GetFileType (hFile=0x788) returned 0x1 [0142.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0142.242] GetFileType (hFile=0x788) returned 0x1 [0142.242] SetEndOfFile (hFile=0x788) returned 1 [0142.242] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1518 [0142.242] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb5160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb5160*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0142.243] WriteFile (in: hFile=0x788, lpBuffer=0x2bb65b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2bb65b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0142.244] ReadFile (in: hFile=0x78c, lpBuffer=0x2bb5160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2bb5160*, lpNumberOfBytesRead=0xb3f1fc*=0x518, lpOverlapped=0x0) returned 1 [0142.245] WriteFile (in: hFile=0x788, lpBuffer=0x2bb7ad8*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2bb7ad8*, lpNumberOfBytesWritten=0xb3f1b4*=0x520, lpOverlapped=0x0) returned 1 [0142.245] CloseHandle (hObject=0x788) returned 1 [0142.245] CloseHandle (hObject=0x78c) returned 1 [0142.296] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png", lpFilePart=0x0) returned 0x3b [0142.296] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.png")) returned 1 [0142.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.299] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV", lpFilePart=0x0) returned 0x20 [0142.299] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.301] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.301] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InboxTemplates", cAlternateFileName="INBOXT~1")) returned 1 [0142.301] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts", cAlternateFileName="")) returned 1 [0142.301] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0142.301] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.302] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.302] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV", lpFilePart=0x0) returned 0x20 [0142.302] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.302] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.303] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InboxTemplates", cAlternateFileName="INBOXT~1")) returned 1 [0142.303] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts", cAlternateFileName="")) returned 1 [0142.303] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0142.303] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0142.304] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.305] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates", lpFilePart=0x0) returned 0x2a [0142.305] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58499c0 [0142.306] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.306] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate.xsd", cAlternateFileName="")) returned 1 [0142.306] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013.xsd", cAlternateFileName="")) returned 1 [0142.306] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 1 [0142.306] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 0 [0142.307] FindClose (in: hFindFile=0x58499c0 | out: hFindFile=0x58499c0) returned 1 [0142.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.307] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates", lpFilePart=0x0) returned 0x2a [0142.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.307] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.308] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate.xsd", cAlternateFileName="")) returned 1 [0142.308] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013.xsd", cAlternateFileName="")) returned 1 [0142.308] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 1 [0142.308] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.308] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.310] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts", lpFilePart=0x0) returned 0x28 [0142.310] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c80 [0142.311] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.311] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 1 [0142.311] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 0 [0142.311] FindClose (in: hFindFile=0x5849c80 | out: hFindFile=0x5849c80) returned 1 [0142.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.311] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts", lpFilePart=0x0) returned 0x28 [0142.312] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.312] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.312] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 1 [0142.312] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.312] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.314] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates", lpFilePart=0x0) returned 0x2f [0142.314] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0142.315] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.316] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopSettings2013.xml", cAlternateFileName="")) returned 1 [0142.316] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EaseOfAccessSettings2013.xml", cAlternateFileName="")) returned 1 [0142.317] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013.xml", cAlternateFileName="")) returned 1 [0142.317] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013Backup.xml", cAlternateFileName="")) returned 1 [0142.317] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2010.xml", cAlternateFileName="")) returned 1 [0142.317] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win32.xml", cAlternateFileName="")) returned 1 [0142.317] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win64.xml", cAlternateFileName="")) returned 1 [0142.318] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftNotepad.xml", cAlternateFileName="")) returned 1 [0142.318] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win32.xml", cAlternateFileName="")) returned 1 [0142.318] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win64.xml", cAlternateFileName="")) returned 1 [0142.318] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin32.xml", cAlternateFileName="")) returned 1 [0142.318] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin64.xml", cAlternateFileName="")) returned 1 [0142.319] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win32.xml", cAlternateFileName="")) returned 1 [0142.319] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win64.xml", cAlternateFileName="")) returned 1 [0142.319] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win32.xml", cAlternateFileName="")) returned 1 [0142.319] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win64.xml", cAlternateFileName="")) returned 1 [0142.320] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin32.xml", cAlternateFileName="")) returned 1 [0142.320] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin64.xml", cAlternateFileName="")) returned 1 [0142.320] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win32.xml", cAlternateFileName="")) returned 1 [0142.320] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win64.xml", cAlternateFileName="")) returned 1 [0142.320] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin32.xml", cAlternateFileName="")) returned 1 [0142.321] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin64.xml", cAlternateFileName="")) returned 1 [0142.321] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin32.xml", cAlternateFileName="")) returned 1 [0142.321] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin64.xml", cAlternateFileName="")) returned 1 [0142.321] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win32.xml", cAlternateFileName="")) returned 1 [0142.321] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win64.xml", cAlternateFileName="")) returned 1 [0142.322] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftWordpad.xml", cAlternateFileName="")) returned 1 [0142.322] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkPrinters.xml", cAlternateFileName="")) returned 1 [0142.322] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingCredentialSettings.xml", cAlternateFileName="")) returned 1 [0142.322] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThemeSettings2013.xml", cAlternateFileName="")) returned 1 [0142.322] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 1 [0142.322] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 0 [0142.323] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0142.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.324] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates", lpFilePart=0x0) returned 0x2f [0142.324] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b00 [0142.325] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.325] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopSettings2013.xml", cAlternateFileName="")) returned 1 [0142.325] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EaseOfAccessSettings2013.xml", cAlternateFileName="")) returned 1 [0142.325] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013.xml", cAlternateFileName="")) returned 1 [0142.325] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013Backup.xml", cAlternateFileName="")) returned 1 [0142.325] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2010.xml", cAlternateFileName="")) returned 1 [0142.326] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win32.xml", cAlternateFileName="")) returned 1 [0142.326] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win64.xml", cAlternateFileName="")) returned 1 [0142.326] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftNotepad.xml", cAlternateFileName="")) returned 1 [0142.326] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win32.xml", cAlternateFileName="")) returned 1 [0142.326] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win64.xml", cAlternateFileName="")) returned 1 [0142.326] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin32.xml", cAlternateFileName="")) returned 1 [0142.326] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin64.xml", cAlternateFileName="")) returned 1 [0142.326] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win32.xml", cAlternateFileName="")) returned 1 [0142.327] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win64.xml", cAlternateFileName="")) returned 1 [0142.327] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win32.xml", cAlternateFileName="")) returned 1 [0142.327] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win64.xml", cAlternateFileName="")) returned 1 [0142.327] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin32.xml", cAlternateFileName="")) returned 1 [0142.327] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin64.xml", cAlternateFileName="")) returned 1 [0142.327] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win32.xml", cAlternateFileName="")) returned 1 [0142.327] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win64.xml", cAlternateFileName="")) returned 1 [0142.328] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin32.xml", cAlternateFileName="")) returned 1 [0142.328] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin64.xml", cAlternateFileName="")) returned 1 [0142.328] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin32.xml", cAlternateFileName="")) returned 1 [0142.328] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin64.xml", cAlternateFileName="")) returned 1 [0142.328] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win32.xml", cAlternateFileName="")) returned 1 [0142.328] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win64.xml", cAlternateFileName="")) returned 1 [0142.328] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftWordpad.xml", cAlternateFileName="")) returned 1 [0142.329] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkPrinters.xml", cAlternateFileName="")) returned 1 [0142.329] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingCredentialSettings.xml", cAlternateFileName="")) returned 1 [0142.329] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThemeSettings2013.xml", cAlternateFileName="")) returned 1 [0142.329] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 1 [0142.329] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.329] FindClose (in: hFindFile=0x5849b00 | out: hFindFile=0x5849b00) returned 1 [0142.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.335] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Storage Health", lpFilePart=0x0) returned 0x2b [0142.335] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849cc0 [0142.335] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.336] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x165f3a8f, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageEventsArchive.dat", cAlternateFileName="STORAG~1.DAT")) returned 1 [0142.336] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 1 [0142.336] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 0 [0142.336] FindClose (in: hFindFile=0x5849cc0 | out: hFindFile=0x5849cc0) returned 1 [0142.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.336] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Storage Health", lpFilePart=0x0) returned 0x2b [0142.337] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c80 [0142.337] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.337] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x165f3a8f, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageEventsArchive.dat", cAlternateFileName="STORAG~1.DAT")) returned 1 [0142.337] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 1 [0142.337] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.338] FindClose (in: hFindFile=0x5849c80 | out: hFindFile=0x5849c80) returned 1 [0142.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.338] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Speech_OneCore", lpFilePart=0x0) returned 0x2b [0142.338] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849980 [0142.361] FindNextFileW (in: hFindFile=0x5849980, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.362] FindNextFileW (in: hFindFile=0x5849980, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.362] FindClose (in: hFindFile=0x5849980 | out: hFindFile=0x5849980) returned 1 [0142.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.362] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Speech_OneCore", lpFilePart=0x0) returned 0x2b [0142.362] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.363] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.363] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.363] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.364] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Spectrum", lpFilePart=0x0) returned 0x25 [0142.364] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b40 [0142.365] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.365] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.366] FindClose (in: hFindFile=0x5849b40 | out: hFindFile=0x5849b40) returned 1 [0142.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.366] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Spectrum", lpFilePart=0x0) returned 0x25 [0142.366] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0142.366] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.367] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.367] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0142.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.368] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter", lpFilePart=0x0) returned 0x26 [0142.368] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c80 [0142.368] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.369] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 1 [0142.369] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.369] FindClose (in: hFindFile=0x5849c80 | out: hFindFile=0x5849c80) returned 1 [0142.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.369] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter", lpFilePart=0x0) returned 0x26 [0142.369] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.370] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.370] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 1 [0142.370] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 0 [0142.370] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.371] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore", lpFilePart=0x0) returned 0x33 [0142.372] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b00 [0142.430] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.430] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0142.431] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dec862e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0142.431] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b42ee8a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00002.log", cAlternateFileName="")) returned 1 [0142.431] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0142.431] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0142.431] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd24c5a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1deee89a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0142.432] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd973cb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd973cb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 1 [0142.432] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd7110f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd7110f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.jfm", cAlternateFileName="SMSINT~1.JFM")) returned 1 [0142.432] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd7110f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd7110f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.jfm", cAlternateFileName="SMSINT~1.JFM")) returned 0 [0142.432] FindClose (in: hFindFile=0x5849b00 | out: hFindFile=0x5849b00) returned 1 [0142.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.433] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore", lpFilePart=0x0) returned 0x33 [0142.434] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.435] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dec862e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0142.435] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b42ee8a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00002.log", cAlternateFileName="")) returned 1 [0142.436] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0142.436] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0142.436] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd24c5a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1deee89a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0142.436] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd973cb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd973cb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 1 [0142.436] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd7110f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd7110f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.jfm", cAlternateFileName="SMSINT~1.JFM")) returned 1 [0142.437] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.437] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.438] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Settings", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Settings", lpFilePart=0x0) returned 0x25 [0142.438] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Settings\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0142.439] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.439] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accounts", cAlternateFileName="")) returned 1 [0142.439] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.439] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0142.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.440] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Settings", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Settings", lpFilePart=0x0) returned 0x25 [0142.440] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Settings\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0142.440] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.440] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accounts", cAlternateFileName="")) returned 1 [0142.441] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accounts", cAlternateFileName="")) returned 0 [0142.441] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0142.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.441] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Settings\\Accounts", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Settings\\Accounts", lpFilePart=0x0) returned 0x2e [0142.441] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Settings\\Accounts\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.442] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.442] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.442] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.457] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Settings\\Accounts", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Settings\\Accounts", lpFilePart=0x0) returned 0x2e [0142.458] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Settings\\Accounts\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.458] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.458] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.458] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.459] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search", lpFilePart=0x0) returned 0x23 [0142.459] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b40 [0142.461] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.461] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0142.461] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.461] FindClose (in: hFindFile=0x5849b40 | out: hFindFile=0x5849b40) returned 1 [0142.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.461] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search", lpFilePart=0x0) returned 0x23 [0142.462] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.462] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.462] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0142.462] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0142.462] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.463] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x28 [0142.463] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.828] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.828] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0142.828] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.828] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.829] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x28 [0142.829] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58497c0 [0142.830] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.830] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0142.830] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0142.830] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0142.830] FindClose (in: hFindFile=0x58497c0 | out: hFindFile=0x58497c0) returned 1 [0142.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.831] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x2d [0142.831] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0142.838] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.838] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.838] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0142.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x2d [0142.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb99ea4ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0142.865] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb99ea4ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.865] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb99ea4ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0142.865] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0142.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.866] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x35 [0142.866] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849940 [0142.879] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.879] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0142.879] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.879] FindClose (in: hFindFile=0x5849940 | out: hFindFile=0x5849940) returned 1 [0142.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0142.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0142.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0142.880] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x35 [0142.880] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0142.880] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.880] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0142.880] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0142.880] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0142.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0142.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0142.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0142.881] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning", lpFilePart=0x0) returned 0x29 [0142.881] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849a80 [0143.561] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.832] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0143.832] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0143.832] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0143.832] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0143.833] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0143.834] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0143.834] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0143.834] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0143.834] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0143.834] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0143.834] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0143.834] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0143.835] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.835] FindClose (in: hFindFile=0x5849a80 | out: hFindFile=0x5849a80) returned 1 [0143.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0143.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0143.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0143.836] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning", lpFilePart=0x0) returned 0x29 [0143.837] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0143.839] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.839] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0143.839] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0143.839] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0143.839] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0143.840] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0143.840] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0143.844] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0143.844] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0143.845] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0143.846] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0143.846] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0143.846] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0143.846] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0143.846] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0143.848] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 0 [0143.848] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0143.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0143.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0143.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0143.850] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", lpFilePart=0x0) returned 0x50 [0143.850] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0144.194] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.194] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560ed25a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x560ed25a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x560ed25a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x6274, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0144.194] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d0d528, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55d0d528, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55d0d528, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0144.194] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0144.195] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.195] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.196] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", lpFilePart=0x0) returned 0x50 [0144.196] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58498c0 [0144.197] FindNextFileW (in: hFindFile=0x58498c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.197] FindNextFileW (in: hFindFile=0x58498c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560ed25a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x560ed25a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x560ed25a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x6274, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0144.197] FindNextFileW (in: hFindFile=0x58498c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d0d528, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55d0d528, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55d0d528, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0144.197] FindNextFileW (in: hFindFile=0x58498c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0144.198] FindNextFileW (in: hFindFile=0x58498c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0144.198] FindClose (in: hFindFile=0x58498c0 | out: hFindFile=0x58498c0) returned 1 [0144.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.199] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov", lpFilePart=0x0) returned 0x55 [0144.199] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0144.201] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.201] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0144.201] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0144.201] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0144.201] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0144.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.201] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov", lpFilePart=0x0) returned 0x55 [0144.201] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c80 [0144.202] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.202] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0144.202] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0144.202] FindNextFileW (in: hFindFile=0x5849c80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.202] FindClose (in: hFindFile=0x5849c80 | out: hFindFile=0x5849c80) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.203] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0144.203] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0144.223] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.223] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c4e960, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c4e960, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c4e960, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0144.223] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c74bbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c74bbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c74bbc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0144.223] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c9ae14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c9ae14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c9ae14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="2__Power_Policy.provxml", cAlternateFileName="2__POW~1.PRO")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="3__Power_Policy.provxml", cAlternateFileName="3__POW~1.PRO")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="4__Power_Policy.provxml", cAlternateFileName="4__POW~1.PRO")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="5__Power_Policy.provxml", cAlternateFileName="5__POW~1.PRO")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6__Power_Policy.provxml", cAlternateFileName="6__POW~1.PRO")) returned 1 [0144.224] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6__Power_Policy.provxml", cAlternateFileName="6__POW~1.PRO")) returned 0 [0144.224] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.225] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0144.225] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849a40 [0144.226] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c4e960, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c4e960, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c4e960, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c74bbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c74bbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c74bbc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c9ae14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c9ae14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c9ae14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="2__Power_Policy.provxml", cAlternateFileName="2__POW~1.PRO")) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="3__Power_Policy.provxml", cAlternateFileName="3__POW~1.PRO")) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="4__Power_Policy.provxml", cAlternateFileName="4__POW~1.PRO")) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="5__Power_Policy.provxml", cAlternateFileName="5__POW~1.PRO")) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6__Power_Policy.provxml", cAlternateFileName="6__POW~1.PRO")) returned 1 [0144.227] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.227] FindClose (in: hFindFile=0x5849a40 | out: hFindFile=0x5849a40) returned 1 [0144.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.228] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}", lpFilePart=0x0) returned 0x50 [0144.228] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849940 [0144.229] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6a449, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6a449, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6a449, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0144.230] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.230] FindClose (in: hFindFile=0x5849940 | out: hFindFile=0x5849940) returned 1 [0144.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.230] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}", lpFilePart=0x0) returned 0x50 [0144.230] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b00 [0144.231] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.231] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6a449, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6a449, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6a449, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0144.231] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0144.231] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0144.231] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0144.231] FindClose (in: hFindFile=0x5849b00 | out: hFindFile=0x5849b00) returned 1 [0144.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.231] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov", lpFilePart=0x0) returned 0x55 [0144.231] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b00 [0144.232] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.232] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0144.233] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0144.233] FindNextFileW (in: hFindFile=0x5849b00, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0144.233] FindClose (in: hFindFile=0x5849b00 | out: hFindFile=0x5849b00) returned 1 [0144.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.233] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov", lpFilePart=0x0) returned 0x55 [0144.233] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0144.233] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.233] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0144.234] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0144.234] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.234] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0144.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.234] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0144.234] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0144.235] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.235] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef7d10, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef7d10, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0144.235] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef7d10, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef7d10, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0144.235] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0144.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.235] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0144.235] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58497c0 [0144.235] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.236] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef7d10, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef7d10, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0144.236] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.236] FindClose (in: hFindFile=0x58497c0 | out: hFindFile=0x58497c0) returned 1 [0144.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.236] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}", lpFilePart=0x0) returned 0x50 [0144.237] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849a40 [0144.237] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.238] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0144.238] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0144.238] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0144.238] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.238] FindClose (in: hFindFile=0x5849a40 | out: hFindFile=0x5849a40) returned 1 [0144.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.238] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}", lpFilePart=0x0) returned 0x50 [0144.238] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0144.239] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.239] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0144.239] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0144.239] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0144.239] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0144.239] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0144.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.239] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov", lpFilePart=0x0) returned 0x55 [0144.239] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0144.240] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.240] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0144.241] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0144.241] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0144.241] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0144.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.241] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov", lpFilePart=0x0) returned 0x55 [0144.241] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b40 [0144.241] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.241] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0144.242] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0144.242] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.242] FindClose (in: hFindFile=0x5849b40 | out: hFindFile=0x5849b40) returned 1 [0144.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.242] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0144.242] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0144.242] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.242] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f19b66, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f19b66, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0144.242] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f19b66, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f19b66, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0144.243] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0144.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.243] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0144.243] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0144.243] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.243] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f19b66, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f19b66, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0144.243] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.243] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0144.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.244] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}", lpFilePart=0x0) returned 0x50 [0144.244] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b40 [0144.589] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.589] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0144.589] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0144.590] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0144.590] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.590] FindClose (in: hFindFile=0x5849b40 | out: hFindFile=0x5849b40) returned 1 [0144.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.591] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}", lpFilePart=0x0) returned 0x50 [0144.592] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58497c0 [0144.593] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.593] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0144.593] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0144.594] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0144.594] FindNextFileW (in: hFindFile=0x58497c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0144.594] FindClose (in: hFindFile=0x58497c0 | out: hFindFile=0x58497c0) returned 1 [0144.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.600] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov", lpFilePart=0x0) returned 0x55 [0144.600] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f40 [0144.602] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.602] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0144.602] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0144.603] FindNextFileW (in: hFindFile=0x5849f40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0144.603] FindClose (in: hFindFile=0x5849f40 | out: hFindFile=0x5849f40) returned 1 [0144.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0144.603] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov", lpFilePart=0x0) returned 0x55 [0144.603] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0144.603] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.604] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0144.604] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0144.604] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.604] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0144.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0144.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0144.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0144.604] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0144.604] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849cc0 [0144.609] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.612] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900a4472, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900a4472, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="0__CON~1.PRO")) returned 1 [0144.612] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x0, dwReserved1=0x0, cFileName="100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="100__C~1.PRO")) returned 1 [0144.612] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="101__C~1.PRO")) returned 1 [0144.613] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="102__C~1.PRO")) returned 1 [0144.613] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml", cAlternateFileName="103__C~1.PRO")) returned 1 [0144.613] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="104__C~1.PRO")) returned 1 [0144.613] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="105__C~1.PRO")) returned 1 [0144.613] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="106__C~1.PRO")) returned 1 [0144.614] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="107__C~1.PRO")) returned 1 [0144.614] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="108__C~1.PRO")) returned 1 [0144.614] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="109__C~1.PRO")) returned 1 [0144.614] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="10__CO~1.PRO")) returned 1 [0144.614] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="110__C~1.PRO")) returned 1 [0144.615] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="111__C~1.PRO")) returned 1 [0144.615] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="112__C~1.PRO")) returned 1 [0144.615] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="113__C~1.PRO")) returned 1 [0144.615] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="114__C~1.PRO")) returned 1 [0144.615] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="115__C~1.PRO")) returned 1 [0144.619] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="116__C~1.PRO")) returned 1 [0144.619] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="117__C~1.PRO")) returned 1 [0144.619] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="118__C~1.PRO")) returned 1 [0144.619] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="119__C~1.PRO")) returned 1 [0144.619] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="11__CO~1.PRO")) returned 1 [0144.619] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="120__C~1.PRO")) returned 1 [0144.620] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="121__C~1.PRO")) returned 1 [0144.620] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="122__C~1.PRO")) returned 1 [0144.620] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml", cAlternateFileName="123__C~1.PRO")) returned 1 [0144.620] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="124__C~1.PRO")) returned 1 [0144.620] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="125__C~1.PRO")) returned 1 [0144.621] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="126__C~1.PRO")) returned 1 [0144.621] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="127__C~1.PRO")) returned 1 [0144.621] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="128__C~1.PRO")) returned 1 [0144.621] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="129__C~1.PRO")) returned 1 [0144.621] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="12__CO~1.PRO")) returned 1 [0144.621] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="130__C~1.PRO")) returned 1 [0144.625] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="131__C~1.PRO")) returned 1 [0144.625] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="132__C~1.PRO")) returned 1 [0144.625] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="133__C~1.PRO")) returned 1 [0144.625] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="134__C~1.PRO")) returned 1 [0144.626] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="135__C~1.PRO")) returned 1 [0144.630] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="136__C~1.PRO")) returned 1 [0144.630] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="137__C~1.PRO")) returned 1 [0144.630] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="138__C~1.PRO")) returned 1 [0144.630] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="139__C~1.PRO")) returned 1 [0144.631] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="13__CO~1.PRO")) returned 1 [0144.631] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="140__C~1.PRO")) returned 1 [0144.632] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="141__C~1.PRO")) returned 1 [0144.632] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="142__C~1.PRO")) returned 1 [0144.632] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml", cAlternateFileName="143__C~1.PRO")) returned 1 [0144.632] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml", cAlternateFileName="144__C~1.PRO")) returned 1 [0144.632] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml", cAlternateFileName="145__C~1.PRO")) returned 1 [0144.632] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="146__C~1.PRO")) returned 1 [0144.647] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="147__C~1.PRO")) returned 1 [0144.647] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="148__C~1.PRO")) returned 1 [0144.647] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="149__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="14__CO~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="150__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="151__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="152__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml", cAlternateFileName="153__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="154__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="155__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="156__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="157__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="158__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="159__C~1.PRO")) returned 1 [0144.648] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml", cAlternateFileName="15__CO~1.PRO")) returned 1 [0144.649] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="160__C~1.PRO")) returned 1 [0144.649] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="161__C~1.PRO")) returned 1 [0144.657] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="162__C~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="163__C~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="164__C~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="165__C~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="166__C~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="167__C~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="168__C~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="169__C~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml", cAlternateFileName="16__CO~1.PRO")) returned 1 [0144.658] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="170__C~1.PRO")) returned 1 [0144.659] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="171__C~1.PRO")) returned 1 [0144.659] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="172__C~1.PRO")) returned 1 [0144.659] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="173__C~1.PRO")) returned 1 [0144.659] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="174__C~1.PRO")) returned 1 [0144.659] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="175__C~1.PRO")) returned 1 [0144.659] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml", cAlternateFileName="176__C~1.PRO")) returned 1 [0144.659] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml", cAlternateFileName="177__C~1.PRO")) returned 1 [0144.662] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml", cAlternateFileName="178__C~1.PRO")) returned 1 [0144.662] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml", cAlternateFileName="179__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml", cAlternateFileName="17__CO~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml", cAlternateFileName="180__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="181__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="182__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="183__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="184__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="185__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="186__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="187__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml", cAlternateFileName="188__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="189__C~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="18__CE~1.PRO")) returned 1 [0144.663] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="190__C~1.PRO")) returned 1 [0144.664] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="191__C~1.PRO")) returned 1 [0144.664] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="192__C~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="193__C~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="194__C~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="195__C~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="196__C~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="197__C~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="198__C~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="199__C~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="19__CE~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="1__CON~1.PRO")) returned 1 [0144.667] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="200__C~1.PRO")) returned 1 [0144.668] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x308, dwReserved0=0x0, dwReserved1=0x0, cFileName="201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="201__C~1.PRO")) returned 1 [0144.668] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="202__C~1.PRO")) returned 1 [0144.668] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="203__C~1.PRO")) returned 1 [0144.668] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="204__C~1.PRO")) returned 1 [0144.668] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="205__C~1.PRO")) returned 1 [0144.668] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="206__C~1.PRO")) returned 1 [0144.668] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="207__C~1.PRO")) returned 1 [0144.668] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="208__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="209__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="20__CO~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="210__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="211__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="212__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="213__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="214__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="215__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="216__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="217__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x0, cFileName="218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="218__C~1.PRO")) returned 1 [0144.672] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml", cAlternateFileName="219__C~1.PRO")) returned 1 [0144.673] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="21__CO~1.PRO")) returned 1 [0144.673] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="220__C~1.PRO")) returned 1 [0144.673] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x312, dwReserved0=0x0, dwReserved1=0x0, cFileName="221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="221__C~1.PRO")) returned 1 [0144.673] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="222__C~1.PRO")) returned 1 [0144.673] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="223__C~1.PRO")) returned 1 [0144.673] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml", cAlternateFileName="224__C~1.PRO")) returned 1 [0144.676] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml", cAlternateFileName="225__C~1.PRO")) returned 1 [0144.676] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="226__C~1.PRO")) returned 1 [0144.676] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="227__C~1.PRO")) returned 1 [0144.676] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="228__C~1.PRO")) returned 1 [0144.676] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="229__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="22__CO~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="230__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="231__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="232__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="233__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="234__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="235__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="236__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="237__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="238__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="239__C~1.PRO")) returned 1 [0144.677] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="23__CO~1.PRO")) returned 1 [0144.680] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml", cAlternateFileName="240__C~1.PRO")) returned 1 [0144.680] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="241__C~1.PRO")) returned 1 [0144.681] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="242__C~1.PRO")) returned 1 [0144.681] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="243__Connections_Cellular_Bitė Lietuva (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="243__C~1.PRO")) returned 1 [0144.681] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x302, dwReserved0=0x0, dwReserved1=0x0, cFileName="244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="244__C~1.PRO")) returned 1 [0144.681] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="245__C~1.PRO")) returned 1 [0144.681] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="246__C~1.PRO")) returned 1 [0144.681] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="247__C~1.PRO")) returned 1 [0144.681] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="248__C~1.PRO")) returned 1 [0144.681] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="249__C~1.PRO")) returned 1 [0144.682] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="24__CE~1.PRO")) returned 1 [0144.682] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="250__C~1.PRO")) returned 1 [0144.682] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="251__C~1.PRO")) returned 1 [0144.682] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="252__C~1.PRO")) returned 1 [0144.682] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml", cAlternateFileName="253__C~1.PRO")) returned 1 [0144.682] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="254__C~1.PRO")) returned 1 [0144.682] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="255__C~1.PRO")) returned 1 [0144.689] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="256__C~1.PRO")) returned 1 [0144.689] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="257__C~1.PRO")) returned 1 [0144.689] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="258__C~1.PRO")) returned 1 [0144.689] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="259__C~1.PRO")) returned 1 [0144.689] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="25__CE~1.PRO")) returned 1 [0144.689] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="260__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="261__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="262__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="263__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="264__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml", cAlternateFileName="265__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="266__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="267__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="268__C~1.PRO")) returned 1 [0144.690] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="269__C~1.PRO")) returned 1 [0144.691] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x0, dwReserved1=0x0, cFileName="26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="26__CO~1.PRO")) returned 1 [0144.691] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x317, dwReserved0=0x0, dwReserved1=0x0, cFileName="270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="270__C~1.PRO")) returned 1 [0144.691] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="271__C~1.PRO")) returned 1 [0144.694] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="272__C~1.PRO")) returned 1 [0144.694] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="273__C~1.PRO")) returned 1 [0144.694] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml", cAlternateFileName="274__C~1.PRO")) returned 1 [0144.694] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml", cAlternateFileName="275__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="276__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="277__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml", cAlternateFileName="278__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml", cAlternateFileName="279__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="27__CO~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml", cAlternateFileName="280__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml", cAlternateFileName="281__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml", cAlternateFileName="282__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml", cAlternateFileName="283__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="284__C~1.PRO")) returned 1 [0144.695] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml", cAlternateFileName="285__C~1.PRO")) returned 1 [0144.696] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml", cAlternateFileName="286__C~1.PRO")) returned 1 [0144.696] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml", cAlternateFileName="287__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml", cAlternateFileName="288__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml", cAlternateFileName="289__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x0, cFileName="28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="28__CO~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml", cAlternateFileName="290__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml", cAlternateFileName="291__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="292__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="293__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="294__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="295__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="296__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="297__C~1.PRO")) returned 1 [0144.699] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="298__C~1.PRO")) returned 1 [0144.700] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="299__C~1.PRO")) returned 1 [0144.700] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="29__CO~1.PRO")) returned 1 [0144.700] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="2__CON~1.PRO")) returned 1 [0144.700] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="300__C~1.PRO")) returned 1 [0144.700] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="301__C~1.PRO")) returned 1 [0144.744] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml", cAlternateFileName="302__C~1.PRO")) returned 1 [0144.744] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="303__C~1.PRO")) returned 1 [0144.744] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="304__C~1.PRO")) returned 1 [0144.744] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="305__C~1.PRO")) returned 1 [0144.744] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml", cAlternateFileName="306__C~1.PRO")) returned 1 [0144.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0144.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0144.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.227] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt", lpFilePart=0x0) returned 0x30 [0145.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0145.228] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\osver.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffff [0145.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3d500) returned 1 [0145.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.313] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage", lpFilePart=0x0) returned 0x34 [0145.313] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.315] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.315] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 1 [0145.315] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.315] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.316] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage", lpFilePart=0x0) returned 0x34 [0145.316] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.316] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.316] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 1 [0145.316] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 0 [0145.317] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.317] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA", lpFilePart=0x0) returned 0x3b [0145.317] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0145.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0145.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.321] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage", lpFilePart=0x0) returned 0x37 [0145.321] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849a80 [0145.322] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.322] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.322] FindClose (in: hFindFile=0x5849a80 | out: hFindFile=0x5849a80) returned 1 [0145.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.323] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage", lpFilePart=0x0) returned 0x37 [0145.323] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849900 [0145.323] FindNextFileW (in: hFindFile=0x5849900, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.323] FindNextFileW (in: hFindFile=0x5849900, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.323] FindClose (in: hFindFile=0x5849900 | out: hFindFile=0x5849900) returned 1 [0145.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.324] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding", lpFilePart=0x0) returned 0x32 [0145.324] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.341] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.342] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 1 [0145.343] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 1 [0145.344] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 1 [0145.344] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 1 [0145.344] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 1 [0145.344] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 1 [0145.344] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 1 [0145.345] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 1 [0145.346] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0145.346] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0145.346] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 1 [0145.346] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 1 [0145.347] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 0 [0145.347] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.348] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding", lpFilePart=0x0) returned 0x32 [0145.348] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.349] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.349] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 1 [0145.349] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 1 [0145.350] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 1 [0145.351] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0145.352] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0145.352] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 1 [0145.352] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 1 [0145.352] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.352] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.358] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc", lpFilePart=0x0) returned 0x2e [0145.358] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.370] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.371] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.371] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.371] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc", lpFilePart=0x0) returned 0x2e [0145.372] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.372] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.373] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.373] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.374] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload", lpFilePart=0x0) returned 0x2f [0145.374] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.374] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.375] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.375] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.375] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload", lpFilePart=0x0) returned 0x2f [0145.375] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.375] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.376] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.376] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.391] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore", lpFilePart=0x0) returned 0x36 [0145.392] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849a80 [0145.393] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.393] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.393] FindClose (in: hFindFile=0x5849a80 | out: hFindFile=0x5849a80) returned 1 [0145.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.393] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore", lpFilePart=0x0) returned 0x36 [0145.394] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.394] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.394] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.394] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.395] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs", lpFilePart=0x0) returned 0x2e [0145.395] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849a40 [0145.406] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.407] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d5cadbc, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0145.407] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScenarioShutdownLogger", cAlternateFileName="SCENAR~1")) returned 1 [0145.407] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0145.408] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.408] FindClose (in: hFindFile=0x5849a40 | out: hFindFile=0x5849a40) returned 1 [0145.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.409] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs", lpFilePart=0x0) returned 0x2e [0145.409] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849a80 [0145.410] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.410] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d5cadbc, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0145.410] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScenarioShutdownLogger", cAlternateFileName="SCENAR~1")) returned 1 [0145.411] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0145.411] FindNextFileW (in: hFindFile=0x5849a80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 0 [0145.411] FindClose (in: hFindFile=0x5849a80 | out: hFindFile=0x5849a80) returned 1 [0145.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.413] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", lpFilePart=0x0) returned 0x3d [0145.413] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.415] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.415] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0145.415] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0145.415] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.415] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", lpFilePart=0x0) returned 0x3d [0145.415] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.416] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.416] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0145.416] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.416] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.417] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", lpFilePart=0x0) returned 0x45 [0145.417] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.417] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.417] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.417] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.418] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", lpFilePart=0x0) returned 0x45 [0145.418] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849900 [0145.418] FindNextFileW (in: hFindFile=0x5849900, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.418] FindNextFileW (in: hFindFile=0x5849900, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.419] FindClose (in: hFindFile=0x5849900 | out: hFindFile=0x5849900) returned 1 [0145.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.420] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", lpFilePart=0x0) returned 0x39 [0145.420] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849940 [0145.420] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.420] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0x6d79fcc6, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0145.421] FindNextFileW (in: hFindFile=0x5849940, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0x6d79fcc6, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0145.421] FindClose (in: hFindFile=0x5849940 | out: hFindFile=0x5849940) returned 1 [0145.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.421] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", lpFilePart=0x0) returned 0x39 [0145.421] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0145.422] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.422] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0x6d79fcc6, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0145.422] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.422] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0145.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.423] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings", lpFilePart=0x0) returned 0x39 [0145.423] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.428] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.429] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 1 [0145.429] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 1 [0145.429] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 1 [0145.429] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 1 [0145.429] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 1 [0145.430] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 1 [0145.430] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 1 [0145.430] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 1 [0145.430] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 1 [0145.431] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 0 [0145.431] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.432] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings", lpFilePart=0x0) returned 0x39 [0145.432] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.433] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.434] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 1 [0145.434] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 1 [0145.434] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 1 [0145.434] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 1 [0145.434] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 1 [0145.435] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 1 [0145.435] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 1 [0145.435] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 1 [0145.435] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 1 [0145.435] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.435] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.437] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios", lpFilePart=0x0) returned 0x3a [0145.437] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849a40 [0145.437] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.438] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 1 [0145.438] FindNextFileW (in: hFindFile=0x5849a40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 0 [0145.438] FindClose (in: hFindFile=0x5849a40 | out: hFindFile=0x5849a40) returned 1 [0145.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.438] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios", lpFilePart=0x0) returned 0x3a [0145.438] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.439] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.439] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 1 [0145.455] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.456] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.456] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader", lpFilePart=0x0) returned 0x35 [0145.456] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.457] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.457] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.457] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.457] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader", lpFilePart=0x0) returned 0x35 [0145.458] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849b40 [0145.458] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.458] FindNextFileW (in: hFindFile=0x5849b40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.458] FindClose (in: hFindFile=0x5849b40 | out: hFindFile=0x5849b40) returned 1 [0145.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.458] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0145.459] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58499c0 [0145.459] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.459] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.459] FindClose (in: hFindFile=0x58499c0 | out: hFindFile=0x58499c0) returned 1 [0145.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.460] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0145.460] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.460] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.460] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0145.460] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.461] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0145.461] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.462] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.462] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0145.462] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0145.462] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.462] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.462] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0145.463] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849cc0 [0145.463] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.463] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0145.463] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0145.463] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0145.464] FindClose (in: hFindFile=0x5849cc0 | out: hFindFile=0x5849cc0) returned 1 [0145.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.464] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0145.464] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.465] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.465] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0145.465] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0145.465] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.465] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.466] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0145.466] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849cc0 [0145.466] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.466] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0145.467] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0145.467] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0145.467] FindClose (in: hFindFile=0x5849cc0 | out: hFindFile=0x5849cc0) returned 1 [0145.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.467] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0145.467] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849cc0 [0145.500] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.500] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.500] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0145.501] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0145.501] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0145.501] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0145.501] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0145.501] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0145.502] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0145.502] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0145.502] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0145.502] FindClose (in: hFindFile=0x5849cc0 | out: hFindFile=0x5849cc0) returned 1 [0145.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.504] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0145.504] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849cc0 [0145.505] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.505] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0145.506] FindNextFileW (in: hFindFile=0x5849cc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.507] FindClose (in: hFindFile=0x5849cc0 | out: hFindFile=0x5849cc0) returned 1 [0145.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.508] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x5b [0145.508] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.510] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.510] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0145.510] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0145.510] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.510] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x5b [0145.511] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0145.511] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.511] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0145.511] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.511] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0145.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.512] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0145.512] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0145.514] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.514] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0145.515] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0145.516] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0145.516] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0145.516] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0145.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.519] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0145.519] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0145.521] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0145.522] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.522] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0145.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.523] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x5b [0145.523] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.524] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.524] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0145.524] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0145.525] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.525] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x5b [0145.525] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.525] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.525] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0145.525] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.525] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.526] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0145.526] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.526] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.526] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0145.526] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0145.526] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.527] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.527] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0145.527] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.527] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.527] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0145.527] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0145.527] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0145.527] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.528] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0145.528] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849880 [0145.528] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.528] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0145.528] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0145.528] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0145.528] FindNextFileW (in: hFindFile=0x5849880, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0145.529] FindClose (in: hFindFile=0x5849880 | out: hFindFile=0x5849880) returned 1 [0145.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.529] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0145.529] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849c40 [0145.529] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.529] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0145.529] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0145.529] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0145.529] FindNextFileW (in: hFindFile=0x5849c40, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.530] FindClose (in: hFindFile=0x5849c40 | out: hFindFile=0x5849c40) returned 1 [0145.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.579] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0145.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0145.580] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0145.582] GetFileType (hFile=0x78c) returned 0x1 [0145.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0145.582] GetFileType (hFile=0x78c) returned 0x1 [0145.582] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.P4WN3D", lpFilePart=0x0) returned 0x6d [0145.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0145.582] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0145.586] GetFileType (hFile=0x788) returned 0x1 [0145.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0145.587] GetFileType (hFile=0x788) returned 0x1 [0145.587] SetEndOfFile (hFile=0x788) returned 1 [0145.587] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1fad1 [0145.588] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.591] WriteFile (in: hFile=0x788, lpBuffer=0x2c09c0c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c09c0c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.593] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.593] WriteFile (in: hFile=0x788, lpBuffer=0x2c0ac18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0ac18*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.594] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.594] WriteFile (in: hFile=0x788, lpBuffer=0x2c0bc24*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0bc24*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.594] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.595] WriteFile (in: hFile=0x788, lpBuffer=0x2c0cc30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0cc30*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.595] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.595] WriteFile (in: hFile=0x788, lpBuffer=0x2c0dc3c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0dc3c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.596] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.596] WriteFile (in: hFile=0x788, lpBuffer=0x2c0ec48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0ec48*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.596] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.597] WriteFile (in: hFile=0x788, lpBuffer=0x2c0fc54*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c0fc54*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.597] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.597] WriteFile (in: hFile=0x788, lpBuffer=0x2c10c60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c10c60*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.597] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.625] WriteFile (in: hFile=0x788, lpBuffer=0x2c11c6c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c11c6c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.626] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.628] WriteFile (in: hFile=0x788, lpBuffer=0x2c12c78*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c12c78*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.629] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.629] WriteFile (in: hFile=0x788, lpBuffer=0x2c13c84*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c13c84*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.629] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.630] WriteFile (in: hFile=0x788, lpBuffer=0x2c14c90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c14c90*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.630] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.630] WriteFile (in: hFile=0x788, lpBuffer=0x2c15c9c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c15c9c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.630] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.631] WriteFile (in: hFile=0x788, lpBuffer=0x2c16ca8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c16ca8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.631] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.631] WriteFile (in: hFile=0x788, lpBuffer=0x2c17cb4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c17cb4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.631] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.632] WriteFile (in: hFile=0x788, lpBuffer=0x2c18cc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c18cc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.632] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.632] WriteFile (in: hFile=0x788, lpBuffer=0x2c19ccc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c19ccc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.633] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.633] WriteFile (in: hFile=0x788, lpBuffer=0x2c1acd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1acd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.633] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.634] WriteFile (in: hFile=0x788, lpBuffer=0x2c1bce4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1bce4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.634] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.634] WriteFile (in: hFile=0x788, lpBuffer=0x2c1ccf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1ccf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.634] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.635] WriteFile (in: hFile=0x788, lpBuffer=0x2c1dcfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1dcfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.635] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.635] WriteFile (in: hFile=0x788, lpBuffer=0x2c1ed08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1ed08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.636] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.636] WriteFile (in: hFile=0x788, lpBuffer=0x2c1fd14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c1fd14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.636] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.636] WriteFile (in: hFile=0x788, lpBuffer=0x2c20d20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c20d20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.637] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.637] WriteFile (in: hFile=0x788, lpBuffer=0x2c21d2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c21d2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.637] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.638] WriteFile (in: hFile=0x788, lpBuffer=0x2c22d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c22d38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.638] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.638] WriteFile (in: hFile=0x788, lpBuffer=0x2c23d44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c23d44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.638] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.639] WriteFile (in: hFile=0x788, lpBuffer=0x2c24d50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c24d50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.639] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.639] WriteFile (in: hFile=0x788, lpBuffer=0x2c25d5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c25d5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.639] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.640] WriteFile (in: hFile=0x788, lpBuffer=0x2c26d68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c26d68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.640] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.640] WriteFile (in: hFile=0x788, lpBuffer=0x2c27d74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c27d74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.641] ReadFile (in: hFile=0x78c, lpBuffer=0x2c087bc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c087bc*, lpNumberOfBytesRead=0xb3f1fc*=0xad1, lpOverlapped=0x0) returned 1 [0145.641] WriteFile (in: hFile=0x788, lpBuffer=0x2c2985c*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c2985c*, lpNumberOfBytesWritten=0xb3f1b4*=0xae0, lpOverlapped=0x0) returned 1 [0145.641] CloseHandle (hObject=0x788) returned 1 [0145.658] CloseHandle (hObject=0x78c) returned 1 [0145.662] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0145.664] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0 [0145.670] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x65 [0145.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0145.670] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0145.678] GetFileType (hFile=0x78c) returned 0x1 [0145.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0145.678] GetFileType (hFile=0x78c) returned 0x1 [0145.678] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.P4WN3D", lpFilePart=0x0) returned 0x6c [0145.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0145.678] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0145.679] GetFileType (hFile=0x788) returned 0x1 [0145.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0145.679] GetFileType (hFile=0x788) returned 0x1 [0145.679] SetEndOfFile (hFile=0x788) returned 1 [0145.679] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x70c1 [0145.679] ReadFile (in: hFile=0x78c, lpBuffer=0x2c2bb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c2bb4c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.765] WriteFile (in: hFile=0x788, lpBuffer=0x2c2cf9c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2cf9c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.767] ReadFile (in: hFile=0x78c, lpBuffer=0x2c2bb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c2bb4c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.840] WriteFile (in: hFile=0x788, lpBuffer=0x2c2dfa8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2dfa8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.840] ReadFile (in: hFile=0x78c, lpBuffer=0x2c2bb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c2bb4c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.840] WriteFile (in: hFile=0x788, lpBuffer=0x2c2efb4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2efb4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.840] ReadFile (in: hFile=0x78c, lpBuffer=0x2c2bb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c2bb4c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.841] WriteFile (in: hFile=0x788, lpBuffer=0x2c2ffc0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c2ffc0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.841] ReadFile (in: hFile=0x78c, lpBuffer=0x2c2bb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c2bb4c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.841] WriteFile (in: hFile=0x788, lpBuffer=0x2c30fcc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c30fcc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.841] ReadFile (in: hFile=0x78c, lpBuffer=0x2c2bb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c2bb4c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.842] WriteFile (in: hFile=0x788, lpBuffer=0x2c31fd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c31fd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.842] ReadFile (in: hFile=0x78c, lpBuffer=0x2c2bb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c2bb4c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0145.842] WriteFile (in: hFile=0x788, lpBuffer=0x2c32fe4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c32fe4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0145.842] ReadFile (in: hFile=0x78c, lpBuffer=0x2c2bb4c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c2bb4c*, lpNumberOfBytesRead=0xb3f1fc*=0xc1, lpOverlapped=0x0) returned 1 [0145.843] WriteFile (in: hFile=0x788, lpBuffer=0x2c340bc*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c340bc*, lpNumberOfBytesWritten=0xb3f1b4*=0xd0, lpOverlapped=0x0) returned 1 [0145.843] CloseHandle (hObject=0x788) returned 1 [0145.859] CloseHandle (hObject=0x78c) returned 1 [0145.862] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x65 [0145.862] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0 [0145.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0145.865] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0145.865] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58499c0 [0145.941] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.941] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0145.942] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0145.942] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0145.942] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0145.942] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0145.942] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0145.942] FindClose (in: hFindFile=0x58499c0 | out: hFindFile=0x58499c0) returned 1 [0145.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0145.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0145.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0145.943] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0145.943] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x58499c0 [0145.945] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.945] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0145.945] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0145.945] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0145.945] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0145.945] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0145.945] FindNextFileW (in: hFindFile=0x58499c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.946] FindClose (in: hFindFile=0x58499c0 | out: hFindFile=0x58499c0) returned 1 [0145.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0145.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0145.949] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0145.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0145.949] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0146.632] GetFileType (hFile=0x78c) returned 0x1 [0146.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0146.632] GetFileType (hFile=0x78c) returned 0x1 [0146.632] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.P4WN3D", lpFilePart=0x0) returned 0x6d [0146.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0146.632] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0146.633] GetFileType (hFile=0x788) returned 0x1 [0146.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0146.633] GetFileType (hFile=0x788) returned 0x1 [0146.633] SetEndOfFile (hFile=0x788) returned 1 [0146.633] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x1fad1 [0146.634] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.694] WriteFile (in: hFile=0x788, lpBuffer=0x2c3acd8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3acd8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.695] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.731] WriteFile (in: hFile=0x788, lpBuffer=0x2c3bce4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3bce4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.732] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.733] WriteFile (in: hFile=0x788, lpBuffer=0x2c3ccf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3ccf0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.733] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.734] WriteFile (in: hFile=0x788, lpBuffer=0x2c3dcfc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3dcfc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.734] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.736] WriteFile (in: hFile=0x788, lpBuffer=0x2c3ed08*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3ed08*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.736] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.761] WriteFile (in: hFile=0x788, lpBuffer=0x2c3fd14*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c3fd14*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.762] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.763] WriteFile (in: hFile=0x788, lpBuffer=0x2c40d20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c40d20*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.763] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.764] WriteFile (in: hFile=0x788, lpBuffer=0x2c41d2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c41d2c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.764] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.765] WriteFile (in: hFile=0x788, lpBuffer=0x2c42d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c42d38*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.766] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.767] WriteFile (in: hFile=0x788, lpBuffer=0x2c43d44*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c43d44*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.767] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.768] WriteFile (in: hFile=0x788, lpBuffer=0x2c44d50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c44d50*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.768] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.769] WriteFile (in: hFile=0x788, lpBuffer=0x2c45d5c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c45d5c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.770] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.770] WriteFile (in: hFile=0x788, lpBuffer=0x2c46d68*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c46d68*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.771] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.771] WriteFile (in: hFile=0x788, lpBuffer=0x2c47d74*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c47d74*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.772] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.772] WriteFile (in: hFile=0x788, lpBuffer=0x2c48d80*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c48d80*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.773] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.774] WriteFile (in: hFile=0x788, lpBuffer=0x2c49d8c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c49d8c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.774] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.774] WriteFile (in: hFile=0x788, lpBuffer=0x2c4ad98*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4ad98*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.775] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.775] WriteFile (in: hFile=0x788, lpBuffer=0x2c4bda4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4bda4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.775] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.776] WriteFile (in: hFile=0x788, lpBuffer=0x2c4cdb0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4cdb0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.776] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.777] WriteFile (in: hFile=0x788, lpBuffer=0x2c4ddbc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4ddbc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.777] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.780] WriteFile (in: hFile=0x788, lpBuffer=0x2c4edc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4edc8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.781] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.781] WriteFile (in: hFile=0x788, lpBuffer=0x2c4fdd4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c4fdd4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.781] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.788] WriteFile (in: hFile=0x788, lpBuffer=0x2c50de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c50de0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.788] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.789] WriteFile (in: hFile=0x788, lpBuffer=0x2c51dec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c51dec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.790] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.790] WriteFile (in: hFile=0x788, lpBuffer=0x2c52df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c52df8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.790] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.791] WriteFile (in: hFile=0x788, lpBuffer=0x2c53e04*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c53e04*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.791] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.792] WriteFile (in: hFile=0x788, lpBuffer=0x2c54e10*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c54e10*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.792] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.793] WriteFile (in: hFile=0x788, lpBuffer=0x2c55e1c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c55e1c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.793] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.793] WriteFile (in: hFile=0x788, lpBuffer=0x2c56e28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c56e28*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.793] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.825] WriteFile (in: hFile=0x788, lpBuffer=0x2c57e34*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c57e34*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.825] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0146.826] WriteFile (in: hFile=0x788, lpBuffer=0x2c58e40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c58e40*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0146.826] ReadFile (in: hFile=0x78c, lpBuffer=0x2c39888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c39888*, lpNumberOfBytesRead=0xb3f1fc*=0xad1, lpOverlapped=0x0) returned 1 [0146.827] WriteFile (in: hFile=0x788, lpBuffer=0x2c5a928*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c5a928*, lpNumberOfBytesWritten=0xb3f1b4*=0xae0, lpOverlapped=0x0) returned 1 [0146.827] CloseHandle (hObject=0x788) returned 1 [0146.830] CloseHandle (hObject=0x78c) returned 1 [0146.832] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0146.832] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0 [0146.838] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x62 [0146.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0146.838] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0147.179] GetFileType (hFile=0x78c) returned 0x1 [0147.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0147.179] GetFileType (hFile=0x78c) returned 0x1 [0147.179] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.P4WN3D", lpFilePart=0x0) returned 0x69 [0147.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0147.179] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0147.180] GetFileType (hFile=0x788) returned 0x1 [0147.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0147.180] GetFileType (hFile=0x788) returned 0x1 [0147.180] SetEndOfFile (hFile=0x788) returned 1 [0147.180] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xadc8 [0147.180] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.227] WriteFile (in: hFile=0x788, lpBuffer=0x2c5e048*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5e048*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.228] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.229] WriteFile (in: hFile=0x788, lpBuffer=0x2c5f054*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c5f054*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.230] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.237] WriteFile (in: hFile=0x788, lpBuffer=0x2c60060*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c60060*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.238] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.238] WriteFile (in: hFile=0x788, lpBuffer=0x2c6106c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c6106c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.239] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.240] WriteFile (in: hFile=0x788, lpBuffer=0x2c62078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c62078*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.240] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.241] WriteFile (in: hFile=0x788, lpBuffer=0x2c63084*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c63084*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.241] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.242] WriteFile (in: hFile=0x788, lpBuffer=0x2c64090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c64090*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.242] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.242] WriteFile (in: hFile=0x788, lpBuffer=0x2c6509c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c6509c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.243] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.243] WriteFile (in: hFile=0x788, lpBuffer=0x2c660a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c660a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.243] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.244] WriteFile (in: hFile=0x788, lpBuffer=0x2c670b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c670b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.244] ReadFile (in: hFile=0x78c, lpBuffer=0x2c5cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c5cbf8*, lpNumberOfBytesRead=0xb3f1fc*=0xdc8, lpOverlapped=0x0) returned 1 [0147.245] WriteFile (in: hFile=0x788, lpBuffer=0x2c68e8c*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2c68e8c*, lpNumberOfBytesWritten=0xb3f1b4*=0xdd0, lpOverlapped=0x0) returned 1 [0147.245] CloseHandle (hObject=0x788) returned 1 [0147.249] CloseHandle (hObject=0x78c) returned 1 [0147.251] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x62 [0147.252] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0 [0147.256] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x63 [0147.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0147.256] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0147.257] GetFileType (hFile=0x78c) returned 0x1 [0147.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0147.257] GetFileType (hFile=0x78c) returned 0x1 [0147.257] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.P4WN3D", lpFilePart=0x0) returned 0x6a [0147.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0147.257] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0147.258] GetFileType (hFile=0x788) returned 0x1 [0147.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0147.258] GetFileType (hFile=0x788) returned 0x1 [0147.258] SetEndOfFile (hFile=0x788) returned 1 [0147.258] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x70c1 [0147.258] ReadFile (in: hFile=0x78c, lpBuffer=0x2c6b148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c6b148*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.266] WriteFile (in: hFile=0x788, lpBuffer=0x2c6c598*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c6c598*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.267] ReadFile (in: hFile=0x78c, lpBuffer=0x2c6b148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c6b148*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.282] WriteFile (in: hFile=0x788, lpBuffer=0x2c6d5a4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c6d5a4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.283] ReadFile (in: hFile=0x78c, lpBuffer=0x2c6b148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c6b148*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.284] WriteFile (in: hFile=0x788, lpBuffer=0x2c6e5b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c6e5b0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.284] ReadFile (in: hFile=0x78c, lpBuffer=0x2c6b148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c6b148*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.285] WriteFile (in: hFile=0x788, lpBuffer=0x2c6f5bc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2c6f5bc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.285] ReadFile (in: hFile=0x78c, lpBuffer=0x2c6b148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2c6b148*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.290] WriteFile (in: hFile=0x788, lpBuffer=0x2a7074c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7074c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.290] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6f3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6f3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.324] WriteFile (in: hFile=0x788, lpBuffer=0x2a71758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a71758*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.324] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6f3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6f3b8*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.333] WriteFile (in: hFile=0x788, lpBuffer=0x2a72764*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a72764*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.333] ReadFile (in: hFile=0x78c, lpBuffer=0x2a6f3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a6f3b8*, lpNumberOfBytesRead=0xb3f1fc*=0xc1, lpOverlapped=0x0) returned 1 [0147.334] WriteFile (in: hFile=0x788, lpBuffer=0x2a7383c*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a7383c*, lpNumberOfBytesWritten=0xb3f1b4*=0xd0, lpOverlapped=0x0) returned 1 [0147.335] CloseHandle (hObject=0x788) returned 1 [0147.336] CloseHandle (hObject=0x78c) returned 1 [0147.338] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x63 [0147.338] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0 [0147.343] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x64 [0147.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0147.344] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0147.875] GetFileType (hFile=0x78c) returned 0x1 [0147.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0147.875] GetFileType (hFile=0x78c) returned 0x1 [0147.875] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.P4WN3D", lpFilePart=0x0) returned 0x6b [0147.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0147.875] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.P4WN3D" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0147.876] GetFileType (hFile=0x788) returned 0x1 [0147.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0147.876] GetFileType (hFile=0x788) returned 0x1 [0147.876] SetEndOfFile (hFile=0x788) returned 1 [0147.877] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x99d3 [0147.877] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.899] WriteFile (in: hFile=0x788, lpBuffer=0x2a76f58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a76f58*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.901] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.901] WriteFile (in: hFile=0x788, lpBuffer=0x2a77f64*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a77f64*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.902] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.902] WriteFile (in: hFile=0x788, lpBuffer=0x2a78f70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a78f70*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.902] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.902] WriteFile (in: hFile=0x788, lpBuffer=0x2a79f7c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a79f7c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.903] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.903] WriteFile (in: hFile=0x788, lpBuffer=0x2a7af88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7af88*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.903] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.903] WriteFile (in: hFile=0x788, lpBuffer=0x2a7bf94*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7bf94*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.903] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.904] WriteFile (in: hFile=0x788, lpBuffer=0x2a7cfa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7cfa0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.904] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.904] WriteFile (in: hFile=0x788, lpBuffer=0x2a7dfac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7dfac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.904] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0147.904] WriteFile (in: hFile=0x788, lpBuffer=0x2a7efb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2a7efb8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0147.905] ReadFile (in: hFile=0x78c, lpBuffer=0x2a75b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2a75b08*, lpNumberOfBytesRead=0xb3f1fc*=0x9d3, lpOverlapped=0x0) returned 1 [0147.905] WriteFile (in: hFile=0x788, lpBuffer=0x2a809a0*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2a809a0*, lpNumberOfBytesWritten=0xb3f1b4*=0x9e0, lpOverlapped=0x0) returned 1 [0147.905] CloseHandle (hObject=0x788) returned 1 [0147.908] CloseHandle (hObject=0x78c) returned 1 [0147.911] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x64 [0147.911] DeleteFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0 [0147.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0147.915] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart", lpFilePart=0x0) returned 0x25 [0147.915] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0147.915] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.916] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0147.916] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.916] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0147.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0147.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0147.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0147.916] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart", lpFilePart=0x0) returned 0x25 [0147.917] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0147.917] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.917] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0147.917] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 0 [0147.918] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0147.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0147.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0147.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0147.919] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi", lpFilePart=0x0) returned 0x2e [0147.919] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0147.919] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.920] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.920] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0147.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0147.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0147.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0147.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi", lpFilePart=0x0) returned 0x2e [0147.920] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a340 [0147.921] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.921] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.921] FindClose (in: hFindFile=0x584a340 | out: hFindFile=0x584a340) returned 1 [0147.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0147.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0147.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0147.922] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0147.922] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a100 [0147.993] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.993] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0147.993] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0147.993] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0147.993] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0147.994] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0147.994] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.994] FindClose (in: hFindFile=0x584a100 | out: hFindFile=0x584a100) returned 1 [0147.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0147.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0147.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0147.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x23 [0147.995] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0147.995] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.995] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0147.995] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0147.996] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0147.996] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0147.996] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0147.996] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0 [0147.996] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0147.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0147.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0147.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0147.998] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys", lpFilePart=0x0) returned 0x2e [0147.998] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0147.998] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.999] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0147.999] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0147.999] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 0 [0147.999] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0147.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0147.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0147.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0147.999] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys", lpFilePart=0x0) returned 0x2e [0148.000] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a640 [0148.000] FindNextFileW (in: hFindFile=0x584a640, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.000] FindNextFileW (in: hFindFile=0x584a640, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0148.000] FindNextFileW (in: hFindFile=0x584a640, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0148.001] FindNextFileW (in: hFindFile=0x584a640, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.066] FindClose (in: hFindFile=0x584a640 | out: hFindFile=0x584a640) returned 1 [0148.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.067] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x27 [0148.068] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0148.069] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.069] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0148.069] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0148.070] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.070] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0148.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.070] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x27 [0148.070] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a6c0 [0148.071] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.071] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0148.071] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0148.071] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0148.071] FindClose (in: hFindFile=0x584a6c0 | out: hFindFile=0x584a6c0) returned 1 [0148.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.073] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x30 [0148.073] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.074] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.074] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0148.074] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 0 [0148.074] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.075] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x30 [0148.075] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.075] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0148.076] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.076] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.077] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x33 [0148.077] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a040 [0148.078] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.079] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 1 [0148.080] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 0 [0148.080] FindClose (in: hFindFile=0x584a040 | out: hFindFile=0x584a040) returned 1 [0148.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.080] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x33 [0148.080] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0148.083] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.083] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 1 [0148.083] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.084] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0148.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.085] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP", lpFilePart=0x0) returned 0x2a [0148.085] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a340 [0148.086] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.086] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0148.086] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.086] FindClose (in: hFindFile=0x584a340 | out: hFindFile=0x584a340) returned 1 [0148.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.087] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP", lpFilePart=0x0) returned 0x2a [0148.087] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0148.087] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.088] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0148.088] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0 [0148.088] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0148.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.089] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0148.089] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a700 [0148.091] FindNextFileW (in: hFindFile=0x584a700, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.091] FindNextFileW (in: hFindFile=0x584a700, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.091] FindClose (in: hFindFile=0x584a700 | out: hFindFile=0x584a700) returned 1 [0148.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x28 [0148.092] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a0c0 [0148.092] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.092] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.092] FindClose (in: hFindFile=0x584a0c0 | out: hFindFile=0x584a0c0) returned 1 [0148.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.093] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0148.093] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0148.093] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.094] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0148.094] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.094] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0148.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.094] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x27 [0148.094] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a100 [0148.095] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.095] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0148.095] FindNextFileW (in: hFindFile=0x584a100, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0148.096] FindClose (in: hFindFile=0x584a100 | out: hFindFile=0x584a100) returned 1 [0148.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.096] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0148.096] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0148.097] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.098] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.098] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0148.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x33 [0148.098] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.099] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.099] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.099] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.099] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x27 [0148.100] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.100] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.100] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1 [0148.101] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1 [0148.101] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1 [0148.101] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0148.101] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0148.101] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0148.102] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0148.102] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1 [0148.102] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0148.102] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0148.102] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.103] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.103] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x27 [0148.103] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a380 [0148.103] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.104] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1 [0148.104] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1 [0148.104] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1 [0148.104] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0148.104] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0148.105] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0148.105] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0148.105] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1 [0148.105] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0148.105] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0148.106] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0148.106] FindClose (in: hFindFile=0x584a380 | out: hFindFile=0x584a380) returned 1 [0148.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4e [0148.108] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a000 [0148.181] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.182] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x0, dwReserved1=0x0, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1 [0148.183] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0148.183] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0148.183] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0148.183] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 1 [0148.184] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0148.184] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 1 [0148.184] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0148.184] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 1 [0148.184] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0148.185] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 1 [0148.185] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0148.185] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0148.185] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0148.185] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0148.185] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0148.186] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0148.186] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0148.186] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0148.186] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0148.186] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0148.187] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0148.187] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0148.188] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0148.189] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0148.189] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0148.189] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0148.189] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0148.190] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0148.190] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0148.190] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0148.190] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0148.190] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0148.191] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0148.191] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0148.191] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0148.191] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0148.191] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0148.192] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0148.192] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0148.192] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0148.192] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0148.192] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0148.193] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1 [0148.193] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 1 [0148.193] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 0 [0148.193] FindClose (in: hFindFile=0x584a000 | out: hFindFile=0x584a000) returned 1 [0148.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.195] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4e [0148.195] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0148.196] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x0, dwReserved1=0x0, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0148.197] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0148.198] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0148.199] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 1 [0148.200] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.200] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0148.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.202] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x30 [0148.202] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.203] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.203] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.203] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.203] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x30 [0148.203] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f80 [0148.204] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.204] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.204] FindClose (in: hFindFile=0x5849f80 | out: hFindFile=0x5849f80) returned 1 [0148.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.205] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases", lpFilePart=0x0) returned 0x37 [0148.205] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a040 [0148.208] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.208] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", cAlternateFileName="5A65C4~1")) returned 1 [0148.208] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 1 [0148.208] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.208] FindClose (in: hFindFile=0x584a040 | out: hFindFile=0x584a040) returned 1 [0148.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.209] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases", lpFilePart=0x0) returned 0x37 [0148.209] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a000 [0148.211] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.211] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", cAlternateFileName="5A65C4~1")) returned 1 [0148.211] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 1 [0148.211] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 0 [0148.211] FindClose (in: hFindFile=0x584a000 | out: hFindFile=0x584a000) returned 1 [0148.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.212] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", lpFilePart=0x0) returned 0x5c [0148.212] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.266] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.266] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0148.266] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0148.267] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.267] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.267] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", lpFilePart=0x0) returned 0x5c [0148.267] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a380 [0148.268] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.268] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0148.272] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0148.272] FindNextFileW (in: hFindFile=0x584a380, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0148.272] FindClose (in: hFindFile=0x584a380 | out: hFindFile=0x584a380) returned 1 [0148.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.272] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", lpFilePart=0x0) returned 0x66 [0148.273] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.275] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.275] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0148.275] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0148.275] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.276] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", lpFilePart=0x0) returned 0x66 [0148.277] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0148.278] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.278] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0148.278] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.278] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0148.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.279] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", lpFilePart=0x0) returned 0x65 [0148.279] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f80 [0148.283] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.283] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0148.283] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0148.283] FindClose (in: hFindFile=0x5849f80 | out: hFindFile=0x5849f80) returned 1 [0148.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.284] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", lpFilePart=0x0) returned 0x65 [0148.285] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a0c0 [0148.286] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.286] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0148.286] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.286] FindClose (in: hFindFile=0x584a0c0 | out: hFindFile=0x584a0c0) returned 1 [0148.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.287] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F", lpFilePart=0x0) returned 0x5c [0148.287] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0148.289] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.289] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0148.289] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0148.289] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.289] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0148.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.289] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F", lpFilePart=0x0) returned 0x5c [0148.289] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.290] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.290] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0148.290] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0148.290] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0148.290] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.290] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", lpFilePart=0x0) returned 0x66 [0148.290] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a680 [0148.293] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.293] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0148.293] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0148.293] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.x-none.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0148.293] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x316a100, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0148.293] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0148.293] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0148.294] FindClose (in: hFindFile=0x584a680 | out: hFindFile=0x584a680) returned 1 [0148.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.295] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", lpFilePart=0x0) returned 0x66 [0148.295] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a000 [0148.296] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.296] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0148.296] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0148.296] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.x-none.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0148.296] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x316a100, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0148.296] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0148.297] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.297] FindClose (in: hFindFile=0x584a000 | out: hFindFile=0x584a000) returned 1 [0148.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.299] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16", lpFilePart=0x0) returned 0x65 [0148.299] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0148.342] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.342] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd19cd600, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5bec, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0148.342] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0148.342] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x1dff67, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.Culture.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0148.342] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0148.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0148.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.531] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop", lpFilePart=0x0) returned 0x1a [0148.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0148.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.569] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Comms", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Comms", lpFilePart=0x0) returned 0x18 [0148.570] FindClose (in: hFindFile=0x584a640 | out: hFindFile=0x584a640) returned 1 [0148.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.571] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Comms", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Comms", lpFilePart=0x0) returned 0x18 [0148.571] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Comms\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0148.571] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.571] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.571] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0148.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.572] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data", lpFilePart=0x0) returned 0x23 [0148.572] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f268) returned 1 [0148.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.575] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0148.575] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0148.575] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.576] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0148.576] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.576] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0148.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.576] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0148.576] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a680 [0148.576] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.577] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0148.577] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0148.577] FindClose (in: hFindFile=0x584a680 | out: hFindFile=0x584a680) returned 1 [0148.578] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0148.578] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.663] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.663] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0148.663] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0148.663] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0148.663] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.664] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.665] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0148.665] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a6c0 [0148.666] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.667] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0148.667] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0148.667] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0148.667] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0148.667] FindClose (in: hFindFile=0x584a6c0 | out: hFindFile=0x584a6c0) returned 1 [0148.669] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\S", lpFilePart=0x0) returned 0x1e [0148.669] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a1c0 [0148.670] FindNextFileW (in: hFindFile=0x584a1c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.670] FindNextFileW (in: hFindFile=0x584a1c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.671] FindClose (in: hFindFile=0x584a1c0 | out: hFindFile=0x584a1c0) returned 1 [0148.671] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\S", lpFilePart=0x0) returned 0x1e [0148.671] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0148.671] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.672] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.672] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0148.673] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070", lpFilePart=0x0) returned 0x30 [0148.673] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a0c0 [0148.673] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.674] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.674] FindClose (in: hFindFile=0x584a0c0 | out: hFindFile=0x584a0c0) returned 1 [0148.674] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070", lpFilePart=0x0) returned 0x30 [0148.674] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0148.675] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.675] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.675] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0148.676] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033", lpFilePart=0x0) returned 0x30 [0148.676] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f80 [0148.677] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.677] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.677] FindClose (in: hFindFile=0x5849f80 | out: hFindFile=0x5849f80) returned 1 [0148.678] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033", lpFilePart=0x0) returned 0x30 [0148.678] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a000 [0148.678] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.678] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0148.678] FindClose (in: hFindFile=0x584a000 | out: hFindFile=0x584a000) returned 1 [0148.679] GetFullPathNameW (in: lpFileName="C:\\Logs", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Logs", lpFilePart=0x0) returned 0x7 [0148.679] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0148.709] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.715] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0148.715] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0148.716] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0148.716] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0148.716] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0148.716] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0148.717] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0148.717] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0148.717] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0148.717] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0148.718] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0148.718] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0148.718] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0148.718] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0148.718] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0148.719] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0148.719] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0148.719] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0148.719] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0148.720] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0148.720] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0148.721] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0148.721] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0148.721] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0148.722] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0148.722] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0148.722] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0148.722] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0148.723] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0148.723] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0148.723] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0148.723] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0148.724] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0148.724] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0148.724] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0148.724] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0148.725] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0148.725] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0148.725] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0148.725] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0148.725] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0148.726] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0148.727] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0148.727] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0148.727] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0148.728] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0148.728] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0148.728] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0148.728] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0148.729] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0148.729] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0148.729] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0148.729] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0148.729] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0148.730] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0148.730] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0148.730] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0148.730] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0148.731] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0148.731] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0148.731] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0148.731] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0148.732] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0148.732] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0148.732] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0148.733] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0148.733] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0148.733] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0148.733] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0148.734] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0148.734] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0148.734] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0148.734] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0148.734] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0148.735] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0148.735] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0148.735] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0148.736] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0148.736] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0148.736] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0148.736] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0148.737] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0148.737] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0148.737] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0148.738] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0148.738] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0148.738] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0148.738] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0148.738] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0148.739] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0148.740] GetFullPathNameW (in: lpFileName="C:\\Logs", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Logs", lpFilePart=0x0) returned 0x7 [0148.740] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a180 [0148.741] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.742] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0148.743] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0148.743] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0148.743] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0148.743] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0148.743] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0148.743] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0148.744] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0148.744] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0148.744] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0148.744] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0148.744] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0148.744] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0148.745] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0148.745] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0148.745] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0148.745] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0148.745] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0148.745] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0148.745] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0148.745] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0148.746] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0148.746] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0148.746] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0148.746] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0148.746] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0148.746] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0148.746] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0148.747] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0148.748] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0148.748] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0148.748] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0148.748] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0148.748] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0148.748] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0148.748] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0148.748] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0148.749] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0148.750] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0148.750] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0148.750] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0148.750] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0148.750] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0148.750] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0148.750] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0148.750] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0148.751] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0148.751] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0148.751] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0148.751] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0148.853] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0148.854] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0148.854] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0148.854] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0148.854] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0148.854] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0148.854] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0148.854] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0148.854] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.854] FindClose (in: hFindFile=0x584a180 | out: hFindFile=0x584a180) returned 1 [0148.855] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0148.856] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0148.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.859] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0148.859] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a180 [0148.860] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.861] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0148.861] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0148.861] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0148.862] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0148.862] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0148.862] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0148.862] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0148.862] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0148.862] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0148.863] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0148.863] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0148.863] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0148.863] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0148.863] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0148.863] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0148.863] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0148.863] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0148.864] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0148.864] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0148.864] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0148.864] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0148.864] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0148.864] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0148.864] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0148.864] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0148.865] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0148.866] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0148.867] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0148.868] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0148.868] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.868] FindClose (in: hFindFile=0x584a180 | out: hFindFile=0x584a180) returned 1 [0148.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.868] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0148.868] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0148.868] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.869] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x6d72d3cf, ftLastAccessTime.dwHighDateTime=0x1d5e877, ftLastWriteTime.dwLowDateTime=0x6d72d3cf, ftLastWriteTime.dwHighDateTime=0x1d5e877, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0148.869] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0148.869] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0148.869] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0148.869] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0148.869] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0148.870] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0148.870] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0148.870] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0148.870] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0148.870] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0148.870] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0148.870] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0148.871] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0148.872] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0148.872] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0148.872] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0148.872] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0148.872] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0148.872] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0148.873] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0148.873] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0148.873] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0148.873] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0148.873] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0148.873] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0148.874] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0148.874] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0148.874] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0148.874] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0148.874] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0148.874] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0148.875] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0148.875] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0148.875] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0148.875] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0148.875] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0148.876] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0148.876] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0148.877] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0148.877] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0148.877] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0148.877] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0148.877] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0148.877] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0148.878] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0148.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.881] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0148.881] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0148.882] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.883] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0148.883] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0148.883] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0148.883] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0148.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0148.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0148.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0148.883] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0148.883] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0148.884] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.884] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0148.884] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0148.884] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.884] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0148.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0148.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0148.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0148.886] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0148.886] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0149.012] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.012] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.012] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.012] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.013] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0149.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.013] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0149.013] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a040 [0149.013] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.014] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.014] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.014] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.014] FindClose (in: hFindFile=0x584a040 | out: hFindFile=0x584a040) returned 1 [0149.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.015] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0149.015] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0149.016] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.016] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.016] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.016] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.016] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.016] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0149.017] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a340 [0149.017] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.017] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.017] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.017] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.017] FindClose (in: hFindFile=0x584a340 | out: hFindFile=0x584a340) returned 1 [0149.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.019] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\uk-UA", lpFilePart=0x0) returned 0xd [0149.019] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a1c0 [0149.020] FindNextFileW (in: hFindFile=0x584a1c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.020] FindNextFileW (in: hFindFile=0x584a1c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.020] FindNextFileW (in: hFindFile=0x584a1c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0149.020] FindClose (in: hFindFile=0x584a1c0 | out: hFindFile=0x584a1c0) returned 1 [0149.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.021] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\uk-UA", lpFilePart=0x0) returned 0xd [0149.021] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.021] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.021] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.022] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.022] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.023] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0149.023] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0149.024] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.024] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.025] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.025] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.025] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0149.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.025] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0149.025] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.026] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.026] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.026] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.026] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.026] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.027] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0149.027] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a740 [0149.027] FindNextFileW (in: hFindFile=0x584a740, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.028] FindNextFileW (in: hFindFile=0x584a740, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.028] FindNextFileW (in: hFindFile=0x584a740, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.028] FindNextFileW (in: hFindFile=0x584a740, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.028] FindClose (in: hFindFile=0x584a740 | out: hFindFile=0x584a740) returned 1 [0149.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.029] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0149.029] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.029] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.029] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.029] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.030] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.030] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.030] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-RS", lpFilePart=0x0) returned 0x12 [0149.030] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.031] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.031] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.032] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0149.032] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.032] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-RS", lpFilePart=0x0) returned 0x12 [0149.032] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.033] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.033] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.033] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.033] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.033] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS", lpFilePart=0x0) returned 0x12 [0149.034] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0149.035] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.035] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.035] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.035] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.035] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0149.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.036] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS", lpFilePart=0x0) returned 0x12 [0149.036] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a040 [0149.036] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.036] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.036] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.037] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.037] FindClose (in: hFindFile=0x584a040 | out: hFindFile=0x584a040) returned 1 [0149.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.037] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sl-SI", lpFilePart=0x0) returned 0xd [0149.037] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.037] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.038] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.038] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0149.038] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.038] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sl-SI", lpFilePart=0x0) returned 0xd [0149.038] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.038] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.039] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.039] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.039] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.039] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sk-SK", lpFilePart=0x0) returned 0xd [0149.039] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.040] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.041] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.041] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0149.041] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.041] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sk-SK", lpFilePart=0x0) returned 0xd [0149.041] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a200 [0149.042] FindNextFileW (in: hFindFile=0x584a200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.042] FindNextFileW (in: hFindFile=0x584a200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.042] FindNextFileW (in: hFindFile=0x584a200, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.042] FindClose (in: hFindFile=0x584a200 | out: hFindFile=0x584a200) returned 1 [0149.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.042] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0149.042] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849f80 [0149.043] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.043] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.043] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.043] FindNextFileW (in: hFindFile=0x5849f80, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.044] FindClose (in: hFindFile=0x5849f80 | out: hFindFile=0x5849f80) returned 1 [0149.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.044] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0149.044] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a180 [0149.044] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.044] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.044] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.044] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.044] FindClose (in: hFindFile=0x584a180 | out: hFindFile=0x584a180) returned 1 [0149.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.045] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ro-RO", lpFilePart=0x0) returned 0xd [0149.045] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0149.069] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.069] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.069] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0149.070] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0149.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.070] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ro-RO", lpFilePart=0x0) returned 0xd [0149.070] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.070] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.070] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.070] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.070] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.071] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources", lpFilePart=0x0) returned 0x11 [0149.071] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a0c0 [0149.072] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.072] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0149.072] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0149.072] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.072] FindClose (in: hFindFile=0x584a0c0 | out: hFindFile=0x584a0c0) returned 1 [0149.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.072] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources", lpFilePart=0x0) returned 0x11 [0149.072] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0149.073] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.073] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0149.073] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0149.073] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0149.073] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0149.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.073] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US", lpFilePart=0x0) returned 0x17 [0149.073] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a6c0 [0149.074] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.074] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0149.074] FindNextFileW (in: hFindFile=0x584a6c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0149.074] FindClose (in: hFindFile=0x584a6c0 | out: hFindFile=0x584a6c0) returned 1 [0149.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.074] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US", lpFilePart=0x0) returned 0x17 [0149.074] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a0c0 [0149.074] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.074] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0149.074] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.075] FindClose (in: hFindFile=0x584a0c0 | out: hFindFile=0x584a0c0) returned 1 [0149.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.075] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc", lpFilePart=0x0) returned 0x10 [0149.075] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a200 [0149.076] FindNextFileW (in: hFindFile=0x584a200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.076] FindNextFileW (in: hFindFile=0x584a200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.076] FindNextFileW (in: hFindFile=0x584a200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.076] FindNextFileW (in: hFindFile=0x584a200, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.076] FindClose (in: hFindFile=0x584a200 | out: hFindFile=0x584a200) returned 1 [0149.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.076] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc", lpFilePart=0x0) returned 0x10 [0149.076] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a300 [0149.077] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.077] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.077] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.077] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.077] FindClose (in: hFindFile=0x584a300 | out: hFindFile=0x584a300) returned 1 [0149.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.077] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0149.077] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a600 [0149.078] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.078] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.078] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.078] FindNextFileW (in: hFindFile=0x584a600, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.078] FindClose (in: hFindFile=0x584a600 | out: hFindFile=0x584a600) returned 1 [0149.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.078] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0149.078] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0149.078] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.078] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.079] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.079] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.079] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0149.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.079] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0149.079] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.080] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.080] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.080] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.080] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.080] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.080] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0149.081] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a640 [0149.081] FindNextFileW (in: hFindFile=0x584a640, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.081] FindNextFileW (in: hFindFile=0x584a640, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.081] FindNextFileW (in: hFindFile=0x584a640, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.081] FindNextFileW (in: hFindFile=0x584a640, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.081] FindClose (in: hFindFile=0x584a640 | out: hFindFile=0x584a640) returned 1 [0149.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.081] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0149.081] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a180 [0149.082] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.082] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.082] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.082] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.083] FindClose (in: hFindFile=0x584a180 | out: hFindFile=0x584a180) returned 1 [0149.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.083] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0149.083] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a040 [0149.083] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.083] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.083] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.083] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.083] FindClose (in: hFindFile=0x584a040 | out: hFindFile=0x584a040) returned 1 [0149.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.084] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0149.084] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a540 [0149.085] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.085] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.085] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.085] FindNextFileW (in: hFindFile=0x584a540, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.085] FindClose (in: hFindFile=0x584a540 | out: hFindFile=0x584a540) returned 1 [0149.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.085] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0149.085] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a2c0 [0149.085] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.086] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.086] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.086] FindNextFileW (in: hFindFile=0x584a2c0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.086] FindClose (in: hFindFile=0x584a2c0 | out: hFindFile=0x584a2c0) returned 1 [0149.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.086] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0149.086] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a680 [0149.086] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.086] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.087] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.087] FindNextFileW (in: hFindFile=0x584a680, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0149.087] FindClose (in: hFindFile=0x584a680 | out: hFindFile=0x584a680) returned 1 [0149.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.087] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0149.087] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a700 [0149.087] FindNextFileW (in: hFindFile=0x584a700, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.087] FindNextFileW (in: hFindFile=0x584a700, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0149.087] FindNextFileW (in: hFindFile=0x584a700, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0149.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.258] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\header.bmp", lpFilePart=0x0) returned 0x20 [0149.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0149.258] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0149.264] GetFileType (hFile=0x78c) returned 0x1 [0149.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0149.264] GetFileType (hFile=0x78c) returned 0x1 [0149.264] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\header.bmp.P4WN3D", lpFilePart=0x0) returned 0x27 [0149.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0149.264] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp.P4WN3D" (normalized: "c:\\588bce7c90097ed212\\header.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0149.265] GetFileType (hFile=0x788) returned 0x1 [0149.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0149.265] GetFileType (hFile=0x788) returned 0x1 [0149.265] SetEndOfFile (hFile=0x788) returned 1 [0149.265] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xe2c [0149.265] ReadFile (in: hFile=0x78c, lpBuffer=0x2b3fc64, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b3fc64*, lpNumberOfBytesRead=0xb3f1fc*=0xe2c, lpOverlapped=0x0) returned 1 [0149.292] WriteFile (in: hFile=0x788, lpBuffer=0x2b41ee0*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b41ee0*, lpNumberOfBytesWritten=0xb3f1b4*=0xe30, lpOverlapped=0x0) returned 1 [0149.294] CloseHandle (hObject=0x788) returned 1 [0149.295] CloseHandle (hObject=0x78c) returned 1 [0149.298] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\header.bmp", lpFilePart=0x0) returned 0x20 [0149.298] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 1 [0149.312] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x0) returned 0x26 [0149.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0149.312] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0149.314] GetFileType (hFile=0x78c) returned 0x1 [0149.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0149.314] GetFileType (hFile=0x78c) returned 0x1 [0149.314] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp.P4WN3D", lpFilePart=0x0) returned 0x2d [0149.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0149.315] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.P4WN3D" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0149.315] GetFileType (hFile=0x788) returned 0x1 [0149.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0149.315] GetFileType (hFile=0x788) returned 0x1 [0149.315] SetEndOfFile (hFile=0x788) returned 1 [0149.315] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0xa078 [0149.316] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.457] WriteFile (in: hFile=0x788, lpBuffer=0x2b4506c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4506c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.458] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.483] WriteFile (in: hFile=0x788, lpBuffer=0x2b46078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b46078*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.483] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.483] WriteFile (in: hFile=0x788, lpBuffer=0x2b47084*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b47084*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.484] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.484] WriteFile (in: hFile=0x788, lpBuffer=0x2b48090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b48090*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.484] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.484] WriteFile (in: hFile=0x788, lpBuffer=0x2b4909c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4909c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.484] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.485] WriteFile (in: hFile=0x788, lpBuffer=0x2b4a0a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4a0a8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.485] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.485] WriteFile (in: hFile=0x788, lpBuffer=0x2b4b0b4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4b0b4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.485] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.485] WriteFile (in: hFile=0x788, lpBuffer=0x2b4c0c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4c0c0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.486] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.486] WriteFile (in: hFile=0x788, lpBuffer=0x2b4d0cc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4d0cc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.486] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.486] WriteFile (in: hFile=0x788, lpBuffer=0x2b4e0d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b4e0d8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.487] ReadFile (in: hFile=0x78c, lpBuffer=0x2b43c1c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b43c1c*, lpNumberOfBytesRead=0xb3f1fc*=0x78, lpOverlapped=0x0) returned 1 [0149.487] WriteFile (in: hFile=0x788, lpBuffer=0x2b4f160*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b4f160*, lpNumberOfBytesWritten=0xb3f1b4*=0x80, lpOverlapped=0x0) returned 1 [0149.487] CloseHandle (hObject=0x788) returned 1 [0149.490] CloseHandle (hObject=0x78c) returned 1 [0149.492] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x0) returned 0x26 [0149.492] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 1 [0149.498] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x0) returned 0x23 [0149.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0149.498] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x78c [0149.501] GetFileType (hFile=0x78c) returned 0x1 [0149.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0149.501] GetFileType (hFile=0x78c) returned 0x1 [0149.501] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.P4WN3D", nBufferLength=0x105, lpBuffer=0xb3ec1c, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp.P4WN3D", lpFilePart=0x0) returned 0x2a [0149.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f160) returned 1 [0149.502] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.P4WN3D" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.p4wn3d"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x788 [0149.502] GetFileType (hFile=0x788) returned 0x1 [0149.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f15c) returned 1 [0149.502] GetFileType (hFile=0x788) returned 0x1 [0149.502] SetEndOfFile (hFile=0x788) returned 1 [0149.502] GetFileSize (in: hFile=0x78c, lpFileSizeHigh=0xb3f264 | out: lpFileSizeHigh=0xb3f264*=0x0) returned 0x19688 [0149.503] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.515] WriteFile (in: hFile=0x788, lpBuffer=0x2b522ec*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b522ec*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.517] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.525] WriteFile (in: hFile=0x788, lpBuffer=0x2b532f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b532f8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.526] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.526] WriteFile (in: hFile=0x788, lpBuffer=0x2b54304*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b54304*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.526] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.527] WriteFile (in: hFile=0x788, lpBuffer=0x2b55310*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b55310*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.527] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.527] WriteFile (in: hFile=0x788, lpBuffer=0x2b5631c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5631c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.527] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.528] WriteFile (in: hFile=0x788, lpBuffer=0x2b57328*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b57328*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.528] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.528] WriteFile (in: hFile=0x788, lpBuffer=0x2b58334*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b58334*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.528] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.529] WriteFile (in: hFile=0x788, lpBuffer=0x2b59340*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b59340*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.529] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.529] WriteFile (in: hFile=0x788, lpBuffer=0x2b5a34c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5a34c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.529] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.530] WriteFile (in: hFile=0x788, lpBuffer=0x2b5b358*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5b358*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.530] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.530] WriteFile (in: hFile=0x788, lpBuffer=0x2b5c364*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5c364*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.530] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.530] WriteFile (in: hFile=0x788, lpBuffer=0x2b5d370*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5d370*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.531] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.531] WriteFile (in: hFile=0x788, lpBuffer=0x2b5e37c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5e37c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.531] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.531] WriteFile (in: hFile=0x788, lpBuffer=0x2b5f388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b5f388*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.532] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.532] WriteFile (in: hFile=0x788, lpBuffer=0x2b60394*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b60394*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.532] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.532] WriteFile (in: hFile=0x788, lpBuffer=0x2b613a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b613a0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.533] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.533] WriteFile (in: hFile=0x788, lpBuffer=0x2b623ac*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b623ac*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.533] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.533] WriteFile (in: hFile=0x788, lpBuffer=0x2b633b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b633b8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.534] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.534] WriteFile (in: hFile=0x788, lpBuffer=0x2b643c4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b643c4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.534] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.534] WriteFile (in: hFile=0x788, lpBuffer=0x2b653d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b653d0*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.535] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.535] WriteFile (in: hFile=0x788, lpBuffer=0x2b663dc*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b663dc*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.535] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.535] WriteFile (in: hFile=0x788, lpBuffer=0x2b673e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b673e8*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.536] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.538] WriteFile (in: hFile=0x788, lpBuffer=0x2b683f4*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b683f4*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.539] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.539] WriteFile (in: hFile=0x788, lpBuffer=0x2b69400*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b69400*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.539] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x1000, lpOverlapped=0x0) returned 1 [0149.539] WriteFile (in: hFile=0x788, lpBuffer=0x2b6a40c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0xb3f1d4, lpOverlapped=0x0 | out: lpBuffer=0x2b6a40c*, lpNumberOfBytesWritten=0xb3f1d4*=0x1000, lpOverlapped=0x0) returned 1 [0149.540] ReadFile (in: hFile=0x78c, lpBuffer=0x2b50e9c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xb3f1fc, lpOverlapped=0x0 | out: lpBuffer=0x2b50e9c*, lpNumberOfBytesRead=0xb3f1fc*=0x688, lpOverlapped=0x0) returned 1 [0149.540] WriteFile (in: hFile=0x788, lpBuffer=0x2b6baa4*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0xb3f1b4, lpOverlapped=0x0 | out: lpBuffer=0x2b6baa4*, lpNumberOfBytesWritten=0xb3f1b4*=0x690, lpOverlapped=0x0) returned 1 [0149.540] CloseHandle (hObject=0x788) returned 1 [0149.545] CloseHandle (hObject=0x78c) returned 1 [0149.548] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x105, lpBuffer=0xb3ec28, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x0) returned 0x23 [0149.548] DeleteFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 1 [0149.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.557] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics", lpFilePart=0x0) returned 0x1e [0149.557] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.564] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.564] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0149.565] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0149.565] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0149.565] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0149.565] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0149.565] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0149.566] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0149.566] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0149.566] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0149.566] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0149.566] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0149.567] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0149.567] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0149.567] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0149.567] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0149.568] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0149.568] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.569] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics", lpFilePart=0x0) returned 0x1e [0149.569] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.571] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.571] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0149.571] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0149.571] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0149.571] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0149.571] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0149.572] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0149.572] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0149.572] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0149.572] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0149.572] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0149.572] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0149.573] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0149.573] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0149.573] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0149.573] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0149.573] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.573] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.579] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended", lpFilePart=0x0) returned 0x1e [0149.579] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.582] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.582] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0149.582] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0149.582] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0149.582] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.583] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended", lpFilePart=0x0) returned 0x1e [0149.583] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a180 [0149.584] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.584] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0149.584] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0149.584] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.584] FindClose (in: hFindFile=0x584a180 | out: hFindFile=0x584a180) returned 1 [0149.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.585] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client", lpFilePart=0x0) returned 0x1c [0149.585] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a0c0 [0149.585] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.585] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0149.586] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0149.586] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0149.586] FindClose (in: hFindFile=0x584a0c0 | out: hFindFile=0x584a0c0) returned 1 [0149.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.586] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client", lpFilePart=0x0) returned 0x1c [0149.586] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a300 [0149.587] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.587] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0149.587] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0149.587] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.587] FindClose (in: hFindFile=0x584a300 | out: hFindFile=0x584a300) returned 1 [0149.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.588] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082", lpFilePart=0x0) returned 0x1a [0149.588] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.589] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.589] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.589] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.590] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.590] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.590] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.590] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082", lpFilePart=0x0) returned 0x1a [0149.590] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.591] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.591] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.591] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.591] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.591] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.591] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.592] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076", lpFilePart=0x0) returned 0x1a [0149.592] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a0c0 [0149.593] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.593] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.593] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.594] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.594] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.594] FindClose (in: hFindFile=0x584a0c0 | out: hFindFile=0x584a0c0) returned 1 [0149.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.594] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076", lpFilePart=0x0) returned 0x1a [0149.594] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.595] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.595] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.595] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.595] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.595] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.596] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.596] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070", lpFilePart=0x0) returned 0x1a [0149.596] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.647] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.648] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.648] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.648] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.648] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.649] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.649] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070", lpFilePart=0x0) returned 0x1a [0149.649] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.649] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.650] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.650] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.650] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.650] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.650] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.651] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052", lpFilePart=0x0) returned 0x1a [0149.651] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a340 [0149.652] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.652] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.652] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.653] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.653] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.653] FindClose (in: hFindFile=0x584a340 | out: hFindFile=0x584a340) returned 1 [0149.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.653] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052", lpFilePart=0x0) returned 0x1a [0149.653] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a180 [0149.654] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.654] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.654] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.654] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.654] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.655] FindClose (in: hFindFile=0x584a180 | out: hFindFile=0x584a180) returned 1 [0149.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.656] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055", lpFilePart=0x0) returned 0x1a [0149.656] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.656] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.656] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.657] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.657] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.657] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.657] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.658] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055", lpFilePart=0x0) returned 0x1a [0149.658] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.658] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.658] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.658] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.659] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.659] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.659] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.659] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053", lpFilePart=0x0) returned 0x1a [0149.659] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.661] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.661] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.662] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.662] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.662] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.662] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.663] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053", lpFilePart=0x0) returned 0x1a [0149.663] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.663] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.663] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.663] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.663] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.664] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.664] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.664] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049", lpFilePart=0x0) returned 0x1a [0149.664] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.665] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.665] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.665] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.666] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.666] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.666] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.666] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049", lpFilePart=0x0) returned 0x1a [0149.666] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.666] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.667] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.667] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.667] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.667] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.667] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.667] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046", lpFilePart=0x0) returned 0x1a [0149.667] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.668] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.668] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.668] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.668] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.668] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.668] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.669] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046", lpFilePart=0x0) returned 0x1a [0149.669] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a040 [0149.669] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.669] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.669] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.669] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.669] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.670] FindClose (in: hFindFile=0x584a040 | out: hFindFile=0x584a040) returned 1 [0149.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.670] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045", lpFilePart=0x0) returned 0x1a [0149.670] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.670] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.671] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.671] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.671] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.671] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.671] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.672] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045", lpFilePart=0x0) returned 0x1a [0149.672] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a340 [0149.672] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.672] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.672] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.672] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.672] FindNextFileW (in: hFindFile=0x584a340, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.673] FindClose (in: hFindFile=0x584a340 | out: hFindFile=0x584a340) returned 1 [0149.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.673] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044", lpFilePart=0x0) returned 0x1a [0149.673] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.674] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.674] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.674] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.675] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.675] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.675] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.675] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044", lpFilePart=0x0) returned 0x1a [0149.675] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.675] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.676] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.676] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.676] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.676] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.676] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.676] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043", lpFilePart=0x0) returned 0x1a [0149.677] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a0c0 [0149.682] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.682] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.682] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.682] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.682] FindNextFileW (in: hFindFile=0x584a0c0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.682] FindClose (in: hFindFile=0x584a0c0 | out: hFindFile=0x584a0c0) returned 1 [0149.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.683] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043", lpFilePart=0x0) returned 0x1a [0149.683] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a300 [0149.683] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.683] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.683] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.683] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.684] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.684] FindClose (in: hFindFile=0x584a300 | out: hFindFile=0x584a300) returned 1 [0149.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.684] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042", lpFilePart=0x0) returned 0x1a [0149.684] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a180 [0149.688] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.688] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.688] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.688] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.688] FindNextFileW (in: hFindFile=0x584a180, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.689] FindClose (in: hFindFile=0x584a180 | out: hFindFile=0x584a180) returned 1 [0149.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.689] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042", lpFilePart=0x0) returned 0x1a [0149.689] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a300 [0149.689] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.689] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.689] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.689] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.690] FindNextFileW (in: hFindFile=0x584a300, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.690] FindClose (in: hFindFile=0x584a300 | out: hFindFile=0x584a300) returned 1 [0149.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.690] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041", lpFilePart=0x0) returned 0x1a [0149.690] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.690] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.690] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.690] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.691] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.691] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.691] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.691] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041", lpFilePart=0x0) returned 0x1a [0149.691] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.691] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.691] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.691] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.691] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.692] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.692] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.692] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040", lpFilePart=0x0) returned 0x1a [0149.692] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.692] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.692] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.692] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.692] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.692] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.692] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.693] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040", lpFilePart=0x0) returned 0x1a [0149.693] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a000 [0149.693] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.693] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.693] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.693] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.693] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.693] FindClose (in: hFindFile=0x584a000 | out: hFindFile=0x584a000) returned 1 [0149.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.693] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038", lpFilePart=0x0) returned 0x1a [0149.693] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.694] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.694] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.694] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.694] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.694] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.694] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.695] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038", lpFilePart=0x0) returned 0x1a [0149.695] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.695] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.695] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.695] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.695] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.695] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.695] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.695] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037", lpFilePart=0x0) returned 0x1a [0149.695] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.696] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.696] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.696] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.696] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.696] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.696] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.696] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037", lpFilePart=0x0) returned 0x1a [0149.696] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a040 [0149.696] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.696] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.696] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.697] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.697] FindNextFileW (in: hFindFile=0x584a040, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.697] FindClose (in: hFindFile=0x584a040 | out: hFindFile=0x584a040) returned 1 [0149.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.697] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036", lpFilePart=0x0) returned 0x1a [0149.697] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a000 [0149.698] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.698] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.698] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.698] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.698] FindNextFileW (in: hFindFile=0x584a000, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.698] FindClose (in: hFindFile=0x584a000 | out: hFindFile=0x584a000) returned 1 [0149.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.698] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036", lpFilePart=0x0) returned 0x1a [0149.698] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.698] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.699] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.699] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035", lpFilePart=0x0) returned 0x1a [0149.699] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.699] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.699] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.700] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035", lpFilePart=0x0) returned 0x1a [0149.700] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.700] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.700] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.700] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.700] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.700] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.700] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.700] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033", lpFilePart=0x0) returned 0x1a [0149.700] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.701] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.701] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.701] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.701] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.701] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.702] FindClose (in: hFindFile=0x5849fc0 | out: hFindFile=0x5849fc0) returned 1 [0149.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.702] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033", lpFilePart=0x0) returned 0x1a [0149.702] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.702] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.702] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.702] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.702] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.702] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.702] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.702] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032", nBufferLength=0x105, lpBuffer=0xb3ed58, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032", lpFilePart=0x0) returned 0x1a [0149.702] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0xb3efcc | out: lpFindFileData=0xb3efcc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x584a580 [0149.703] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.703] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.703] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.703] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.703] FindNextFileW (in: hFindFile=0x584a580, lpFindFileData=0xb3efd8 | out: lpFindFileData=0xb3efd8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0149.703] FindClose (in: hFindFile=0x584a580 | out: hFindFile=0x584a580) returned 1 [0149.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.703] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032", nBufferLength=0x105, lpBuffer=0xb3ed30, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032", lpFilePart=0x0) returned 0x1a [0149.703] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0xb3efa4 | out: lpFindFileData=0xb3efa4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x5849fc0 [0149.703] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.703] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0149.703] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0149.704] FindNextFileW (in: hFindFile=0x5849fc0, lpFindFileData=0xb3efb0 | out: lpFindFileData=0xb3efb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0149.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f2a4) returned 1 [0149.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f260) returned 1 [0149.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f26c) returned 1 [0149.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f27c) returned 1 [0149.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f238) returned 1 [0149.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f244) returned 1 [0150.115] GetComputerNameW (in: lpBuffer=0xb3f070, nSize=0xb3f2e8 | out: lpBuffer="NQDPDE", nSize=0xb3f2e8) returned 1 [0150.454] NetShareEnum (in: servername="NQDPDE", level=0x2, bufptr=0xb3f2c8, prefmaxlen=0xffffffff, entriesread=0xb3f2d4, totalentries=0xb3f2bc, resume_handle=0xb3f2d0 | out: bufptr=0xb3f2c8, entriesread=0xb3f2d4, totalentries=0xb3f2bc, resume_handle=0xb3f2d0) returned 0x0 [0151.013] NetApiBufferFree (Buffer=0xb3f2c8) returned 0x0 [0151.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", nBufferLength=0x105, lpBuffer=0xb3ec7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", lpFilePart=0x0) returned 0x25 [0151.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xb3f1c0) returned 1 [0151.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\tmp.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x810 [0151.030] GetFileType (hFile=0x810) returned 0x1 [0151.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xb3f1bc) returned 1 [0151.030] GetFileType (hFile=0x810) returned 0x1 [0151.033] WriteFile (in: hFile=0x810, lpBuffer=0x2b9c4d0*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0xb3f220, lpOverlapped=0x0 | out: lpBuffer=0x2b9c4d0*, lpNumberOfBytesWritten=0xb3f220*=0xee, lpOverlapped=0x0) returned 1 [0151.034] CloseHandle (hObject=0x810) returned 1 [0151.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", nBufferLength=0x105, lpBuffer=0xb3eda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", lpFilePart=0x0) returned 0x25 [0151.094] SetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\tmp.txt", dwFileAttributes=0x7) returned 1 [0153.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x105, lpBuffer=0xb3ed24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpFilePart=0x0) returned 0x22 [0153.502] CoTaskMemAlloc (cb=0x804) returned 0x584b1c8 [0153.502] GetShortPathNameW (in: lpszLongPath="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpszShortPath=0x584b1c8, cchBuffer=0x400 | out: lpszShortPath="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe") returned 0x22 [0153.503] CoTaskMemFree (pv=0x584b1c8) [0153.846] GetStartupInfoW (in: lpStartupInfo=0xb3f21c | out: lpStartupInfo=0xb3f21c*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0153.931] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="powershell.exe /c Start-Sleep -s 1 ;Remove-Item –Path C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x20, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0xb3f1d8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0), lpProcessInformation=0x2ba0100 | out: lpCommandLine="powershell.exe /c Start-Sleep -s 1 ;Remove-Item –Path C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpProcessInformation=0x2ba0100*(hProcess=0x814, hThread=0x810, dwProcessId=0x1060, dwThreadId=0x1074)) returned 1 [0155.029] WaitForInputIdle (hProcess=0x814, dwMilliseconds=0x2710) returned 0xffffffff [0155.029] CloseHandle (hObject=0x814) returned 1 [0155.029] CloseHandle (hObject=0x810) returned 1 [0155.427] CoGetContextToken (in: pToken=0xb3f1c8 | out: pToken=0xb3f1c8) returned 0x0 [0155.427] IUnknown:QueryInterface (in: This=0xf70050, riid=0x73bd5e8c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xb3f1ec | out: ppvObject=0xb3f1ec*=0xf7005c) returned 0x0 [0155.427] IComThreadingInfo:GetCurrentThreadType (in: This=0xf7005c, pThreadType=0xb3f24c | out: pThreadType=0xb3f24c*=1) returned 0x0 [0155.428] IUnknown:Release (This=0xf7005c) returned 0x2 [0155.429] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0xf436f8*=0x198, lpdwindex=0xb3f06c | out: lpdwindex=0xb3f06c) returned 0x0 [0155.430] CoGetContextToken (in: pToken=0xb3e2a4 | out: pToken=0xb3e2a4) returned 0x0 [0155.430] CoGetContextToken (in: pToken=0xb3e284 | out: pToken=0xb3e284) returned 0x0 [0155.430] CoGetContextToken (in: pToken=0xb3e208 | out: pToken=0xb3e208) returned 0x0 [0155.430] WshShell:IUnknown:Release (This=0xc704cc) returned 0x0 [0155.431] CoGetContextToken (in: pToken=0xb3e208 | out: pToken=0xb3e208) returned 0x0 [0155.431] WshShell:IUnknown:Release (This=0xc704f8) returned 0x0 Thread: id = 2 os_tid = 0x1174 Thread: id = 3 os_tid = 0x11f8 Thread: id = 4 os_tid = 0x1208 [0063.957] CoGetContextToken (in: pToken=0x4b1f624 | out: pToken=0x4b1f624) returned 0x800401f0 [0063.957] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0063.957] RoInitialize () returned 0x1 [0063.957] RoUninitialize () returned 0x0 [0124.409] CoGetContextToken (in: pToken=0x4b1f610 | out: pToken=0x4b1f610) returned 0x0 [0124.409] CoGetContextToken (in: pToken=0x4b1f590 | out: pToken=0x4b1f590) returned 0x0 [0124.409] WbemLocator:IUnknown:Release (This=0xfcc4b8) returned 0x1 [0124.409] WbemLocator:IUnknown:Release (This=0xfcc4b8) returned 0x0 [0124.409] CoGetContextToken (in: pToken=0x4b1f590 | out: pToken=0x4b1f590) returned 0x0 [0124.409] WbemLocator:IUnknown:Release (This=0xff2d40) returned 0x1 [0124.409] WbemLocator:IUnknown:Release (This=0xff2d40) returned 0x0 [0124.409] CoGetContextToken (in: pToken=0x4b1f610 | out: pToken=0x4b1f610) returned 0x0 [0124.409] IUnknown:QueryInterface (in: This=0xf70050, riid=0x73bef070*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x4b1f5b4 | out: ppvObject=0x4b1f5b4*=0xf70060) returned 0x0 [0124.410] CObjectContext::ContextCallback () returned 0x0 [0155.434] IUnknown:Release (This=0xf70060) returned 0x1 [0155.434] IUnknown:Release (This=0xf70050) returned 0x0 [0155.437] IUnknown:Release (This=0xff4328) returned 0x0 [0155.438] IUnknown:Release (This=0xfe2968) returned 0x0 [0155.439] CloseHandle (hObject=0x4a4) returned 1 [0155.444] CertCloseStore (hCertStore=0x57da380, dwFlags=0x0) returned 1 [0155.467] CertCloseStore (hCertStore=0xfcfef0, dwFlags=0x0) returned 1 [0155.477] CertFreeCertificateContext (pCertContext=0x1003518) returned 1 [0155.485] CertFreeCertificateContext (pCertContext=0x1003568) returned 1 [0155.492] CertFreeCertificateContext (pCertContext=0x10035b8) returned 1 [0155.504] CertFreeCertificateContext (pCertContext=0xf77e40) returned 1 [0155.507] CertFreeCertificateContext (pCertContext=0xf77800) returned 1 [0155.510] CertFreeCertificateContext (pCertContext=0x57e9fe0) returned 1 [0155.511] DeleteSecurityContext (phContext=0x29d6e8c) returned 0x0 [0155.517] CloseHandle (hObject=0x66c) returned 1 [0155.519] CloseHandle (hObject=0x48c) returned 1 [0155.519] CloseHandle (hObject=0x47c) returned 1 [0155.521] FreeContextBuffer (in: pvContextBuffer=0xfdc948 | out: pvContextBuffer=0xfdc948) returned 0x0 [0155.522] CloseHandle (hObject=0x754) returned 1 [0155.524] CloseHandle (hObject=0x750) returned 1 [0155.528] CertFreeCertificateContext (pCertContext=0x1003ce8) returned 1 [0155.529] CertFreeCertificateContext (pCertContext=0x1003838) returned 1 [0155.530] setsockopt (s=0x644, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0155.530] closesocket (s=0x644) returned 0 [0155.535] CertFreeCertificateContext (pCertContext=0xf77e40) returned 1 [0155.536] CloseHandle (hObject=0x600) returned 1 [0155.537] CloseHandle (hObject=0x5fc) returned 1 [0155.538] CloseHandle (hObject=0x5e0) returned 1 [0155.539] CloseHandle (hObject=0x5d4) returned 1 [0155.541] CloseHandle (hObject=0x4ec) returned 1 [0155.541] CloseHandle (hObject=0x410) returned 1 [0155.541] CloseHandle (hObject=0x40c) returned 1 [0155.541] CloseHandle (hObject=0x384) returned 1 [0155.542] CloseHandle (hObject=0x4e8) returned 1 [0155.542] CloseHandle (hObject=0x4e4) returned 1 [0155.543] CloseHandle (hObject=0x4e0) returned 1 [0155.544] CloseHandle (hObject=0x4dc) returned 1 [0155.544] CertFreeCertificateContext (pCertContext=0x1003ce8) returned 1 [0155.546] CloseHandle (hObject=0x4d8) returned 1 [0155.547] CloseHandle (hObject=0x4d4) returned 1 [0155.547] CloseHandle (hObject=0x4c8) returned 1 [0155.548] CertFreeCertificateContext (pCertContext=0x1003838) returned 1 [0155.548] CloseHandle (hObject=0x4c4) returned 1 [0155.549] CloseHandle (hObject=0x4c0) returned 1 [0155.550] CloseHandle (hObject=0x4bc) returned 1 [0155.551] CertFreeCertificateContext (pCertContext=0x1003518) returned 1 [0155.552] CloseHandle (hObject=0x4b8) returned 1 [0155.553] CloseHandle (hObject=0x4ac) returned 1 [0155.554] CloseHandle (hObject=0x4a8) returned 1 [0155.630] EtwEventUnregister (RegHandle=0x57cafe8) returned 0x0 [0155.630] EtwEventUnregister (RegHandle=0x57cb930) returned 0x0 [0155.656] CloseHandle (hObject=0x604) returned 1 [0155.657] UnmapViewOfFile (lpBaseAddress=0x5b40000) returned 1 [0155.657] FreeCredentialsHandle (phCredential=0x29d6cd4) returned 0x0 [0155.658] RegCloseKey (hKey=0x80000004) returned 0x0 [0155.659] CloseHandle (hObject=0x4a0) returned 1 [0155.660] WinHttpCloseHandle (hInternet=0x1019c80) returned 1 [0155.661] CloseHandle (hObject=0x590) returned 1 [0155.661] CloseHandle (hObject=0x58c) returned 1 [0155.661] RegCloseKey (hKey=0x588) returned 0x0 [0155.662] CloseHandle (hObject=0x584) returned 1 [0155.662] RegCloseKey (hKey=0x580) returned 0x0 [0155.662] CloseHandle (hObject=0x57c) returned 1 [0155.662] RegCloseKey (hKey=0x578) returned 0x0 [0155.663] RegCloseKey (hKey=0x574) returned 0x0 [0155.663] CloseHandle (hObject=0x55c) returned 1 [0155.663] setsockopt (s=0x550, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0155.663] closesocket (s=0x550) returned 0 [0155.664] CloseHandle (hObject=0x554) returned 1 [0155.664] setsockopt (s=0x548, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0155.664] closesocket (s=0x548) returned 0 [0155.665] CloseHandle (hObject=0x54c) returned 1 [0155.665] setsockopt (s=0x65c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0155.665] closesocket (s=0x65c) returned 0 [0155.665] CloseHandle (hObject=0x660) returned 1 [0155.666] setsockopt (s=0x654, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0155.666] closesocket (s=0x654) returned 0 [0155.666] CloseHandle (hObject=0x658) returned 1 [0155.673] CoGetContextToken (in: pToken=0x4b1f260 | out: pToken=0x4b1f260) returned 0x0 [0155.673] CoGetContextToken (in: pToken=0x4b1f1e0 | out: pToken=0x4b1f1e0) returned 0x0 [0155.674] WbemLocator:IUnknown:Release (This=0xf77db0) returned 0x4 [0155.675] CoReleaseMarshalData (pStm=0xfc5860) returned 0x0 [0155.676] WbemLocator:IUnknown:Release (This=0xf77db0) returned 0x3 [0155.676] WbemLocator:IUnknown:Release (This=0xf77db0) returned 0x2 [0155.676] WbemLocator:IUnknown:Release (This=0xf77db0) returned 0x1 [0155.676] WbemLocator:IUnknown:Release (This=0xf77db0) returned 0x0 [0155.678] CoGetContextToken (in: pToken=0x4b1f1e0 | out: pToken=0x4b1f1e0) returned 0x0 [0155.678] WbemLocator:IUnknown:Release (This=0xf78300) returned 0x4 [0155.679] CoReleaseMarshalData (pStm=0xfb94d8) returned 0x0 [0155.679] WbemLocator:IUnknown:Release (This=0xf78300) returned 0x3 [0155.679] WbemLocator:IUnknown:Release (This=0xf78300) returned 0x2 [0155.679] WbemLocator:IUnknown:Release (This=0xf78300) returned 0x1 [0155.679] WbemLocator:IUnknown:Release (This=0xf78300) returned 0x0 [0155.680] IUnknown:Release (This=0xf70108) returned 0x0 [0155.680] CoGetContextToken (in: pToken=0x4b1f260 | out: pToken=0x4b1f260) returned 0x0 [0155.680] CoGetContextToken (in: pToken=0x4b1f1e0 | out: pToken=0x4b1f1e0) returned 0x0 [0155.680] WbemDefPath:IUnknown:Release (This=0xfbfaa0) returned 0x1 [0155.680] WbemDefPath:IUnknown:Release (This=0xfbfaa0) returned 0x0 [0155.681] CoGetContextToken (in: pToken=0x4b1f1e0 | out: pToken=0x4b1f1e0) returned 0x0 [0155.681] WbemDefPath:IUnknown:Release (This=0xfdeb68) returned 0x1 [0155.681] WbemDefPath:IUnknown:Release (This=0xfdeb68) returned 0x0 [0155.681] CoGetContextToken (in: pToken=0x4b1f1e0 | out: pToken=0x4b1f1e0) returned 0x0 [0155.681] WbemDefPath:IUnknown:Release (This=0xfde468) returned 0x1 [0155.681] WbemDefPath:IUnknown:Release (This=0xfde468) returned 0x0 [0155.681] CoGetContextToken (in: pToken=0x4b1f1e0 | out: pToken=0x4b1f1e0) returned 0x0 [0155.681] WbemDefPath:IUnknown:Release (This=0xfbfc60) returned 0x1 [0155.681] WbemDefPath:IUnknown:Release (This=0xfbfc60) returned 0x0 [0155.681] CoGetContextToken (in: pToken=0x4b1f1e0 | out: pToken=0x4b1f1e0) returned 0x0 [0155.681] WbemDefPath:IUnknown:Release (This=0xfbf950) returned 0x1 [0155.681] WbemDefPath:IUnknown:Release (This=0xfbf950) returned 0x0 [0155.682] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 5 os_tid = 0x10dc [0070.327] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0070.327] RoInitialize () returned 0x1 [0070.327] RoUninitialize () returned 0x0 [0070.368] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x514f1dc | out: lpiid=0x514f1dc) returned 0x0 [0070.370] CoGetClassObject (in: rclsid=0xfc3b5c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x514eee8 | out: ppv=0x514eee8*=0xfcc4b8) returned 0x0 [0072.245] WbemDefPath:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x514f104 | out: ppvObject=0x514f104*=0x0) returned 0x80004002 [0072.245] WbemDefPath:IClassFactory:CreateInstance (in: This=0xfcc4b8, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514f110 | out: ppvObject=0x514f110*=0xfbf950) returned 0x0 [0072.246] WbemDefPath:IUnknown:Release (This=0xfcc4b8) returned 0x0 [0072.246] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbf950, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514ed34 | out: ppvObject=0x514ed34*=0xfbf950) returned 0x0 [0072.247] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbf950, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x514ecf0 | out: ppvObject=0x514ecf0*=0x0) returned 0x80004002 [0072.247] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbf950, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x514e8e4 | out: ppvObject=0x514e8e4*=0x0) returned 0x80004002 [0072.247] WbemDefPath:IUnknown:AddRef (This=0xfbf950) returned 0x3 [0072.247] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbf950, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x514e644 | out: ppvObject=0x514e644*=0x0) returned 0x80004002 [0072.247] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbf950, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x514e5f4 | out: ppvObject=0x514e5f4*=0x0) returned 0x80004002 [0072.247] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbf950, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514e600 | out: ppvObject=0x514e600*=0xfb9cf8) returned 0x0 [0072.247] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0xfb9cf8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x514e608 | out: pCid=0x514e608*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0072.247] WbemDefPath:IUnknown:Release (This=0xfb9cf8) returned 0x3 [0072.247] CoGetContextToken (in: pToken=0x514e660 | out: pToken=0x514e660) returned 0x0 [0072.248] CoGetContextToken (in: pToken=0x514ea68 | out: pToken=0x514ea68) returned 0x0 [0072.248] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbf950, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514eaf4 | out: ppvObject=0x514eaf4*=0x0) returned 0x80004002 [0072.248] WbemDefPath:IUnknown:Release (This=0xfbf950) returned 0x2 [0072.249] WbemDefPath:IUnknown:Release (This=0xfbf950) returned 0x1 [0072.249] SetEvent (hEvent=0x384) returned 1 [0072.336] CoGetClassObject (in: rclsid=0xfc3b5c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x514eee8 | out: ppv=0x514eee8*=0xfcc3c8) returned 0x0 [0072.336] WbemDefPath:IUnknown:QueryInterface (in: This=0xfcc3c8, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x514f104 | out: ppvObject=0x514f104*=0x0) returned 0x80004002 [0072.336] WbemDefPath:IClassFactory:CreateInstance (in: This=0xfcc3c8, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514f110 | out: ppvObject=0x514f110*=0xfbfc60) returned 0x0 [0072.337] WbemDefPath:IUnknown:Release (This=0xfcc3c8) returned 0x0 [0072.337] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfc60, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514ed34 | out: ppvObject=0x514ed34*=0xfbfc60) returned 0x0 [0072.337] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfc60, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x514ecf0 | out: ppvObject=0x514ecf0*=0x0) returned 0x80004002 [0072.337] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfc60, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x514e8e4 | out: ppvObject=0x514e8e4*=0x0) returned 0x80004002 [0072.337] WbemDefPath:IUnknown:AddRef (This=0xfbfc60) returned 0x3 [0072.337] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfc60, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x514e644 | out: ppvObject=0x514e644*=0x0) returned 0x80004002 [0072.337] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfc60, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x514e5f4 | out: ppvObject=0x514e5f4*=0x0) returned 0x80004002 [0072.337] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfc60, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514e600 | out: ppvObject=0x514e600*=0xfd60b0) returned 0x0 [0072.337] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0xfd60b0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x514e608 | out: pCid=0x514e608*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0072.337] WbemDefPath:IUnknown:Release (This=0xfd60b0) returned 0x3 [0072.337] CoGetContextToken (in: pToken=0x514e660 | out: pToken=0x514e660) returned 0x0 [0072.337] CoGetContextToken (in: pToken=0x514ea68 | out: pToken=0x514ea68) returned 0x0 [0072.337] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfc60, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514eaf4 | out: ppvObject=0x514eaf4*=0x0) returned 0x80004002 [0072.337] WbemDefPath:IUnknown:Release (This=0xfbfc60) returned 0x2 [0072.337] WbemDefPath:IUnknown:Release (This=0xfbfc60) returned 0x1 [0072.337] SetEvent (hEvent=0x40c) returned 1 [0072.340] CoGetClassObject (in: rclsid=0xfc3b5c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x514eee8 | out: ppv=0x514eee8*=0xfcc558) returned 0x0 [0072.340] WbemDefPath:IUnknown:QueryInterface (in: This=0xfcc558, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x514f104 | out: ppvObject=0x514f104*=0x0) returned 0x80004002 [0072.340] WbemDefPath:IClassFactory:CreateInstance (in: This=0xfcc558, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514f110 | out: ppvObject=0x514f110*=0xfbfaa0) returned 0x0 [0072.340] WbemDefPath:IUnknown:Release (This=0xfcc558) returned 0x0 [0072.340] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfaa0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514ed34 | out: ppvObject=0x514ed34*=0xfbfaa0) returned 0x0 [0072.340] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfaa0, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x514ecf0 | out: ppvObject=0x514ecf0*=0x0) returned 0x80004002 [0072.340] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfaa0, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x514e8e4 | out: ppvObject=0x514e8e4*=0x0) returned 0x80004002 [0072.341] WbemDefPath:IUnknown:AddRef (This=0xfbfaa0) returned 0x3 [0072.341] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfaa0, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x514e644 | out: ppvObject=0x514e644*=0x0) returned 0x80004002 [0072.341] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfaa0, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x514e5f4 | out: ppvObject=0x514e5f4*=0x0) returned 0x80004002 [0072.341] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfaa0, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514e600 | out: ppvObject=0x514e600*=0xfd61e8) returned 0x0 [0072.341] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0xfd61e8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x514e608 | out: pCid=0x514e608*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0072.341] WbemDefPath:IUnknown:Release (This=0xfd61e8) returned 0x3 [0072.341] CoGetContextToken (in: pToken=0x514e660 | out: pToken=0x514e660) returned 0x0 [0072.341] CoGetContextToken (in: pToken=0x514ea68 | out: pToken=0x514ea68) returned 0x0 [0072.341] WbemDefPath:IUnknown:QueryInterface (in: This=0xfbfaa0, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514eaf4 | out: ppvObject=0x514eaf4*=0x0) returned 0x80004002 [0072.341] WbemDefPath:IUnknown:Release (This=0xfbfaa0) returned 0x2 [0072.341] WbemDefPath:IUnknown:Release (This=0xfbfaa0) returned 0x1 [0072.341] SetEvent (hEvent=0x410) returned 1 [0099.083] CoGetClassObject (in: rclsid=0xfc3b5c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x514eee8 | out: ppv=0x514eee8*=0xff2cf0) returned 0x0 [0099.084] WbemDefPath:IUnknown:QueryInterface (in: This=0xff2cf0, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x514f104 | out: ppvObject=0x514f104*=0x0) returned 0x80004002 [0099.084] WbemDefPath:IClassFactory:CreateInstance (in: This=0xff2cf0, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514f110 | out: ppvObject=0x514f110*=0xfdeb68) returned 0x0 [0099.084] WbemDefPath:IUnknown:Release (This=0xff2cf0) returned 0x0 [0099.084] WbemDefPath:IUnknown:QueryInterface (in: This=0xfdeb68, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514ed34 | out: ppvObject=0x514ed34*=0xfdeb68) returned 0x0 [0099.084] WbemDefPath:IUnknown:QueryInterface (in: This=0xfdeb68, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x514ecf0 | out: ppvObject=0x514ecf0*=0x0) returned 0x80004002 [0099.084] WbemDefPath:IUnknown:QueryInterface (in: This=0xfdeb68, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x514e8e4 | out: ppvObject=0x514e8e4*=0x0) returned 0x80004002 [0099.135] WbemDefPath:IUnknown:AddRef (This=0xfdeb68) returned 0x3 [0099.135] WbemDefPath:IUnknown:QueryInterface (in: This=0xfdeb68, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x514e644 | out: ppvObject=0x514e644*=0x0) returned 0x80004002 [0099.136] WbemDefPath:IUnknown:QueryInterface (in: This=0xfdeb68, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x514e5f4 | out: ppvObject=0x514e5f4*=0x0) returned 0x80004002 [0099.136] WbemDefPath:IUnknown:QueryInterface (in: This=0xfdeb68, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514e600 | out: ppvObject=0x514e600*=0xff3868) returned 0x0 [0099.136] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0xff3868, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x514e608 | out: pCid=0x514e608*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0099.136] WbemDefPath:IUnknown:Release (This=0xff3868) returned 0x3 [0099.136] CoGetContextToken (in: pToken=0x514e660 | out: pToken=0x514e660) returned 0x0 [0099.136] CoGetContextToken (in: pToken=0x514ea68 | out: pToken=0x514ea68) returned 0x0 [0099.136] WbemDefPath:IUnknown:QueryInterface (in: This=0xfdeb68, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514eaf4 | out: ppvObject=0x514eaf4*=0x0) returned 0x80004002 [0099.136] WbemDefPath:IUnknown:Release (This=0xfdeb68) returned 0x2 [0099.136] WbemDefPath:IUnknown:Release (This=0xfdeb68) returned 0x1 [0099.136] SetEvent (hEvent=0x47c) returned 1 [0099.139] CoGetClassObject (in: rclsid=0xfc3b5c*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x514eee8 | out: ppv=0x514eee8*=0xff2dd0) returned 0x0 [0099.140] WbemDefPath:IUnknown:QueryInterface (in: This=0xff2dd0, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x514f104 | out: ppvObject=0x514f104*=0x0) returned 0x80004002 [0099.140] WbemDefPath:IClassFactory:CreateInstance (in: This=0xff2dd0, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514f110 | out: ppvObject=0x514f110*=0xfde468) returned 0x0 [0099.140] WbemDefPath:IUnknown:Release (This=0xff2dd0) returned 0x0 [0099.140] WbemDefPath:IUnknown:QueryInterface (in: This=0xfde468, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514ed34 | out: ppvObject=0x514ed34*=0xfde468) returned 0x0 [0099.140] WbemDefPath:IUnknown:QueryInterface (in: This=0xfde468, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x514ecf0 | out: ppvObject=0x514ecf0*=0x0) returned 0x80004002 [0099.140] WbemDefPath:IUnknown:QueryInterface (in: This=0xfde468, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x514e8e4 | out: ppvObject=0x514e8e4*=0x0) returned 0x80004002 [0099.140] WbemDefPath:IUnknown:AddRef (This=0xfde468) returned 0x3 [0099.140] WbemDefPath:IUnknown:QueryInterface (in: This=0xfde468, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x514e644 | out: ppvObject=0x514e644*=0x0) returned 0x80004002 [0099.140] WbemDefPath:IUnknown:QueryInterface (in: This=0xfde468, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x514e5f4 | out: ppvObject=0x514e5f4*=0x0) returned 0x80004002 [0099.140] WbemDefPath:IUnknown:QueryInterface (in: This=0xfde468, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514e600 | out: ppvObject=0x514e600*=0xff3928) returned 0x0 [0099.140] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0xff3928, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x514e608 | out: pCid=0x514e608*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0099.140] WbemDefPath:IUnknown:Release (This=0xff3928) returned 0x3 [0099.140] CoGetContextToken (in: pToken=0x514e660 | out: pToken=0x514e660) returned 0x0 [0099.140] CoGetContextToken (in: pToken=0x514ea68 | out: pToken=0x514ea68) returned 0x0 [0099.140] WbemDefPath:IUnknown:QueryInterface (in: This=0xfde468, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x514eaf4 | out: ppvObject=0x514eaf4*=0x0) returned 0x80004002 [0099.140] WbemDefPath:IUnknown:Release (This=0xfde468) returned 0x2 [0099.140] WbemDefPath:IUnknown:Release (This=0xfde468) returned 0x1 [0099.141] SetEvent (hEvent=0x48c) returned 1 Thread: id = 6 os_tid = 0xed4 Thread: id = 7 os_tid = 0x10d4 Thread: id = 8 os_tid = 0x11b0 Thread: id = 9 os_tid = 0xfe0 [0072.364] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0072.365] RoInitialize () returned 0x1 [0072.365] RoUninitialize () returned 0x0 [0072.365] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x558f4ac | out: lpiid=0x558f4ac) returned 0x0 [0072.366] CoGetClassObject (in: rclsid=0xfc3dfc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x558f1b8 | out: ppv=0x558f1b8*=0xfd6560) returned 0x0 [0072.552] WbemLocator:IUnknown:QueryInterface (in: This=0xfd6560, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x558f3d4 | out: ppvObject=0x558f3d4*=0x0) returned 0x80004002 [0072.552] WbemLocator:IClassFactory:CreateInstance (in: This=0xfd6560, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x558f3e0 | out: ppvObject=0x558f3e0*=0xfcc4b8) returned 0x0 [0072.552] WbemLocator:IUnknown:Release (This=0xfd6560) returned 0x0 [0072.552] WbemLocator:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x558f004 | out: ppvObject=0x558f004*=0xfcc4b8) returned 0x0 [0072.552] WbemLocator:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x558efc0 | out: ppvObject=0x558efc0*=0x0) returned 0x80004002 [0072.552] WbemLocator:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x558ebb4 | out: ppvObject=0x558ebb4*=0x0) returned 0x80004002 [0072.553] WbemLocator:IUnknown:AddRef (This=0xfcc4b8) returned 0x3 [0072.553] WbemLocator:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x558e914 | out: ppvObject=0x558e914*=0x0) returned 0x80004002 [0072.553] WbemLocator:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x558e8c4 | out: ppvObject=0x558e8c4*=0x0) returned 0x80004002 [0072.553] WbemLocator:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x558e8d0 | out: ppvObject=0x558e8d0*=0x0) returned 0x80004002 [0072.553] CoGetContextToken (in: pToken=0x558e930 | out: pToken=0x558e930) returned 0x0 [0072.553] CoGetObjectContext (in: riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xfd6564 | out: ppv=0xfd6564*=0xf70108) returned 0x0 [0072.555] CoGetContextToken (in: pToken=0x558ed38 | out: pToken=0x558ed38) returned 0x0 [0072.555] WbemLocator:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x558edc4 | out: ppvObject=0x558edc4*=0x0) returned 0x80004002 [0072.555] WbemLocator:IUnknown:Release (This=0xfcc4b8) returned 0x2 [0072.555] WbemLocator:IUnknown:Release (This=0xfcc4b8) returned 0x1 [0072.555] CoGetContextToken (in: pToken=0x558f3c0 | out: pToken=0x558f3c0) returned 0x0 [0072.555] CoGetContextToken (in: pToken=0x558f320 | out: pToken=0x558f320) returned 0x0 [0072.555] WbemLocator:IUnknown:QueryInterface (in: This=0xfcc4b8, riid=0x558f3f0*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x558f3ec | out: ppvObject=0x558f3ec*=0xfcc4b8) returned 0x0 [0072.555] WbemLocator:IUnknown:AddRef (This=0xfcc4b8) returned 0x3 [0072.556] WbemLocator:IUnknown:Release (This=0xfcc4b8) returned 0x2 [0072.566] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfbfaa0, puCount=0x558f588 | out: puCount=0x558f588*=0x2) returned 0x0 [0072.566] WbemDefPath:IWbemPath:GetText (in: This=0xfbfaa0, lFlags=8, puBuffLength=0x558f584*=0x0, pszText=0x0 | out: puBuffLength=0x558f584*=0xf, pszText=0x0) returned 0x0 [0072.567] WbemDefPath:IWbemPath:GetText (in: This=0xfbfaa0, lFlags=8, puBuffLength=0x558f584*=0xf, pszText="00000000000000" | out: puBuffLength=0x558f584*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0072.575] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x558e784, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0072.578] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x719a0000 [0073.000] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x558ed0c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity5³q\x92\x84t\x86ðù°säïX\x05\x01", lpUsedDefaultChar=0x0) returned 13 [0073.001] GetProcAddress (hModule=0x719a0000, lpProcName="ResetSecurity") returned 0x719a7a70 [0073.014] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x558ed0c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity", lpUsedDefaultChar=0x0) returned 11 [0073.014] GetProcAddress (hModule=0x719a0000, lpProcName="SetSecurity") returned 0x719a7ac0 [0073.026] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x558ed08, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServices³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 18 [0073.027] GetProcAddress (hModule=0x719a0000, lpProcName="BlessIWbemServices") returned 0x719a6b60 [0073.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x558ed00, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObject\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 24 [0073.122] GetProcAddress (hModule=0x719a0000, lpProcName="BlessIWbemServicesObject") returned 0x719a6bc0 [0073.156] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x558ed08, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 17 [0073.156] GetProcAddress (hModule=0x719a0000, lpProcName="GetPropertyHandle") returned 0x719a7500 [0073.299] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x558ed08, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValue³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 18 [0073.300] GetProcAddress (hModule=0x719a0000, lpProcName="WritePropertyValue") returned 0x719a7c30 [0073.314] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x558ed14, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 5 [0073.315] GetProcAddress (hModule=0x719a0000, lpProcName="Clone") returned 0x719a6c20 [0073.326] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x558ed08, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15 [0073.326] GetProcAddress (hModule=0x719a0000, lpProcName="VerifyClientKey") returned 0x719a7bb0 [0073.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x558ed08, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15 [0073.385] GetProcAddress (hModule=0x719a0000, lpProcName="GetQualifierSet") returned 0x719a72c0 [0073.387] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x558ed14, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get", lpUsedDefaultChar=0x0) returned 3 [0073.387] GetProcAddress (hModule=0x719a0000, lpProcName="Get") returned 0x719a7290 [0073.411] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x558ed14, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put", lpUsedDefaultChar=0x0) returned 3 [0073.411] GetProcAddress (hModule=0x719a0000, lpProcName="Put") returned 0x719a76c0 [0073.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x558ed14, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Delete³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 6 [0073.480] GetProcAddress (hModule=0x719a0000, lpProcName="Delete") returned 0x719a6ff0 [0073.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x558ed10, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNames\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 8 [0073.491] GetProcAddress (hModule=0x719a0000, lpProcName="GetNames") returned 0x719a74a0 [0073.565] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x558ed08, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumeration\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 16 [0073.565] GetProcAddress (hModule=0x719a0000, lpProcName="BeginEnumeration") returned 0x719a6b20 [0073.576] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x558ed14, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Next\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 4 [0073.576] GetProcAddress (hModule=0x719a0000, lpProcName="Next") returned 0x719a7660 [0073.595] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x558ed0c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumeration³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 14 [0073.595] GetProcAddress (hModule=0x719a0000, lpProcName="EndEnumeration") returned 0x719a70b0 [0073.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x558ed00, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet", lpUsedDefaultChar=0x0) returned 23 [0073.603] GetProcAddress (hModule=0x719a0000, lpProcName="GetPropertyQualifierSet") returned 0x719a7590 [0073.665] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x558ed14, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 5 [0073.665] GetProcAddress (hModule=0x719a0000, lpProcName="Clone") returned 0x719a6c20 [0073.665] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x558ed0c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 13 [0073.665] GetProcAddress (hModule=0x719a0000, lpProcName="GetObjectText") returned 0x719a74d0 [0073.677] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x558ed08, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 17 [0073.678] GetProcAddress (hModule=0x719a0000, lpProcName="SpawnDerivedClass") returned 0x719a7b10 [0073.687] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x558ed0c, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 13 [0073.687] GetProcAddress (hModule=0x719a0000, lpProcName="SpawnInstance") returned 0x719a7b40 [0073.688] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x558ed10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 9 [0073.688] GetProcAddress (hModule=0x719a0000, lpProcName="CompareTo") returned 0x719a6d10 [0073.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x558ed08, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 17 [0073.699] GetProcAddress (hModule=0x719a0000, lpProcName="GetPropertyOrigin") returned 0x719a7560 [0073.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x558ed0c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFrom\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 12 [0073.769] GetProcAddress (hModule=0x719a0000, lpProcName="InheritsFrom") returned 0x719a75c0 [0073.771] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x558ed10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 9 [0073.771] GetProcAddress (hModule=0x719a0000, lpProcName="GetMethod") returned 0x719a7410 [0073.785] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x558ed10, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 9 [0073.785] GetProcAddress (hModule=0x719a0000, lpProcName="PutMethod") returned 0x719a7890 [0073.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x558ed0c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethod\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 12 [0073.849] GetProcAddress (hModule=0x719a0000, lpProcName="DeleteMethod") returned 0x719a7010 [0073.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x558ed04, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumeration³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 22 [0073.850] GetProcAddress (hModule=0x719a0000, lpProcName="BeginMethodEnumeration") returned 0x719a6b40 [0073.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x558ed10, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethod³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 10 [0073.852] GetProcAddress (hModule=0x719a0000, lpProcName="NextMethod") returned 0x719a7690 [0073.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x558ed04, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumeration\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 20 [0073.868] GetProcAddress (hModule=0x719a0000, lpProcName="EndMethodEnumeration") returned 0x719a70d0 [0073.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x558ed04, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 21 [0073.870] GetProcAddress (hModule=0x719a0000, lpProcName="GetMethodQualifierSet") returned 0x719a7470 [0073.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x558ed08, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin", lpUsedDefaultChar=0x0) returned 15 [0073.872] GetProcAddress (hModule=0x719a0000, lpProcName="GetMethodOrigin") returned 0x719a7440 [0073.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x558ed08, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Get\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 16 [0073.873] GetProcAddress (hModule=0x719a0000, lpProcName="QualifierSet_Get") returned 0x719a7920 [0073.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x558ed08, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Put\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 16 [0073.941] GetProcAddress (hModule=0x719a0000, lpProcName="QualifierSet_Put") returned 0x719a79b0 [0073.961] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x558ed04, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete", lpUsedDefaultChar=0x0) returned 19 [0073.961] GetProcAddress (hModule=0x719a0000, lpProcName="QualifierSet_Delete") returned 0x719a78e0 [0073.962] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x558ed04, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 21 [0073.963] GetProcAddress (hModule=0x719a0000, lpProcName="QualifierSet_GetNames") returned 0x719a7950 [0073.981] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x558ecfc, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 29 [0073.982] GetProcAddress (hModule=0x719a0000, lpProcName="QualifierSet_BeginEnumeration") returned 0x719a78c0 [0073.983] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x558ed08, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 17 [0073.983] GetProcAddress (hModule=0x719a0000, lpProcName="QualifierSet_Next") returned 0x719a7980 [0074.049] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x558ecfc, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration", lpUsedDefaultChar=0x0) returned 27 [0074.049] GetProcAddress (hModule=0x719a0000, lpProcName="QualifierSet_EndEnumeration") returned 0x719a7900 [0074.051] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x558ed00, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType", lpUsedDefaultChar=0x0) returned 23 [0074.051] GetProcAddress (hModule=0x719a0000, lpProcName="GetCurrentApartmentType") returned 0x719a72c0 [0074.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x558ed04, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStub\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 20 [0074.061] GetProcAddress (hModule=0x719a0000, lpProcName="GetDemultiplexedStub") returned 0x719a72e0 [0074.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x558ed04, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi5³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 21 [0074.078] GetProcAddress (hModule=0x719a0000, lpProcName="CreateInstanceEnumWmi") returned 0x719a6f20 [0074.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x558ed08, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmi³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 18 [0074.331] GetProcAddress (hModule=0x719a0000, lpProcName="CreateClassEnumWmi") returned 0x719a6e50 [0074.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x558ed0c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmi\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 12 [0074.333] GetProcAddress (hModule=0x719a0000, lpProcName="ExecQueryWmi") returned 0x719a71c0 [0074.431] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x558ed00, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmi\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 24 [0074.432] GetProcAddress (hModule=0x719a0000, lpProcName="ExecNotificationQueryWmi") returned 0x719a70f0 [0074.433] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x558ed0c, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmi³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 14 [0074.433] GetProcAddress (hModule=0x719a0000, lpProcName="PutInstanceWmi") returned 0x719a77c0 [0074.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x558ed0c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi", lpUsedDefaultChar=0x0) returned 11 [0074.518] GetProcAddress (hModule=0x719a0000, lpProcName="PutClassWmi") returned 0x719a76f0 [0074.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x558ed00, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObject\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 24 [0074.520] GetProcAddress (hModule=0x719a0000, lpProcName="CloneEnumWbemClassObject") returned 0x719a6c40 [0074.603] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x558ed08, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmi\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 16 [0074.603] GetProcAddress (hModule=0x719a0000, lpProcName="ConnectServerWmi") returned 0x719a6d40 [0074.700] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetErrorInfo", cchWideChar=12, lpMultiByteStr=0x558ed0c, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetErrorInfo\x045³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 12 [0074.700] GetProcAddress (hModule=0x719a0000, lpProcName="GetErrorInfo") returned 0x719a7330 [0074.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Initialize", cchWideChar=10, lpMultiByteStr=0x558ed10, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Initialize³q\x92\x84t\x86ðù°säïX\x05", lpUsedDefaultChar=0x0) returned 10 [0074.708] GetProcAddress (hModule=0x719a0000, lpProcName="Initialize") returned 0x719a75e0 [0074.721] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x558ecc0 | out: phkResult=0x558ecc0*=0x444) returned 0x0 [0074.722] RegQueryValueExW (in: hKey=0x444, lpValueName="WMIDisableCOMSecurity", lpReserved=0x0, lpType=0x558ecdc, lpData=0x0, lpcbData=0x558ecd8*=0x0 | out: lpType=0x558ecdc*=0x0, lpData=0x0, lpcbData=0x558ecd8*=0x0) returned 0x2 [0074.722] RegCloseKey (hKey=0x444) returned 0x0 [0074.722] CoCreateInstance (in: rclsid=0x719a36ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x719a370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x558f440 | out: ppv=0x558f440*=0xfcc468) returned 0x0 [0074.723] WbemLocator:IWbemLocator:ConnectServer (in: This=0xfcc468, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x558f4d4 | out: ppNamespace=0x558f4d4*=0xf77db0) returned 0x0 [0091.940] WbemLocator:IUnknown:QueryInterface (in: This=0xf77db0, riid=0x719a352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x558f368 | out: ppvObject=0x558f368*=0xf87cb0) returned 0x0 [0091.941] WbemLocator:IClientSecurity:QueryBlanket (in: This=0xf87cb0, pProxy=0xf77db0, pAuthnSvc=0x558f3b8, pAuthzSvc=0x558f3b4, pServerPrincName=0x558f3ac, pAuthnLevel=0x558f3b0, pImpLevel=0x558f3a0, pAuthInfo=0x558f3a4, pCapabilites=0x558f3a8 | out: pAuthnSvc=0x558f3b8*=0xa, pAuthzSvc=0x558f3b4*=0x0, pServerPrincName=0x558f3ac, pAuthnLevel=0x558f3b0*=0x6, pImpLevel=0x558f3a0*=0x2, pAuthInfo=0x558f3a4, pCapabilites=0x558f3a8*=0x1) returned 0x0 [0091.941] WbemLocator:IUnknown:Release (This=0xf87cb0) returned 0x1 [0091.941] WbemLocator:IUnknown:QueryInterface (in: This=0xf77db0, riid=0x719a351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x558f35c | out: ppvObject=0x558f35c*=0xf87cd4) returned 0x0 [0091.941] WbemLocator:IUnknown:QueryInterface (in: This=0xf77db0, riid=0x719a352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x558f348 | out: ppvObject=0x558f348*=0xf87cb0) returned 0x0 [0091.941] WbemLocator:IClientSecurity:SetBlanket (This=0xf87cb0, pProxy=0xf77db0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0091.941] WbemLocator:IUnknown:Release (This=0xf87cb0) returned 0x2 [0091.941] WbemLocator:IUnknown:Release (This=0xf87cd4) returned 0x1 [0091.941] CoTaskMemFree (pv=0xfdf280) [0091.942] WbemLocator:IUnknown:AddRef (This=0xf77db0) returned 0x2 [0091.942] WbemLocator:IUnknown:Release (This=0xfcc468) returned 0x0 [0091.943] CoGetContextToken (in: pToken=0x558e888 | out: pToken=0x558e888) returned 0x0 [0091.943] CoGetContextToken (in: pToken=0x558ec90 | out: pToken=0x558ec90) returned 0x0 [0091.943] WbemLocator:IUnknown:QueryInterface (in: This=0xf77db0, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x558ec28 | out: ppvObject=0x558ec28*=0xf87cb8) returned 0x0 [0091.944] WbemLocator:IRpcOptions:Query (in: This=0xf87cb8, pPrx=0xfd65f0, dwProperty=2, pdwValue=0x558ed28 | out: pdwValue=0x558ed28) returned 0x80004002 [0091.944] WbemLocator:IUnknown:Release (This=0xf87cb8) returned 0x2 [0091.944] CoGetContextToken (in: pToken=0x558f268 | out: pToken=0x558f268) returned 0x0 [0091.944] CoGetContextToken (in: pToken=0x558f1c8 | out: pToken=0x558f1c8) returned 0x0 [0091.944] WbemLocator:IUnknown:QueryInterface (in: This=0xf77db0, riid=0x558f298*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x558f160 | out: ppvObject=0x558f160*=0xf77db0) returned 0x0 [0091.949] WbemLocator:IUnknown:Release (This=0xf77db0) returned 0x2 [0091.968] SysStringLen (param_1=0x0) returned 0x0 [0091.970] CoUninitialize () Thread: id = 99 os_tid = 0x12f4 [0092.663] CoGetContextToken (in: pToken=0x558f2b4 | out: pToken=0x558f2b4) returned 0x0 [0092.663] CoGetContextToken (in: pToken=0x558f2a4 | out: pToken=0x558f2a4) returned 0x0 [0092.665] CoGetMarshalSizeMax (in: pulSize=0x558f260, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0xfd65f0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x558f260) returned 0x0 [0092.667] CoMarshalInterface (pStm=0xfc5860, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0xfd65f0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0092.671] WbemLocator:IUnknown:QueryInterface (in: This=0xf77db0, riid=0xfce4ac*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x558f0f4 | out: ppvObject=0x558f0f4*=0xf77db0) returned 0x0 [0092.673] WbemLocator:IUnknown:QueryInterface (in: This=0xf77db0, riid=0x718d4cd4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x558f02c | out: ppvObject=0x558f02c*=0xf77db0) returned 0x0 [0092.673] WbemLocator:IUnknown:QueryInterface (in: This=0xf77db0, riid=0x718d4cd4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x558efa8 | out: ppvObject=0x558efa8*=0xf77db0) returned 0x0 [0092.678] IWbemServices:GetObject (in: This=0xf77db0, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x558f2a0*=0x0, ppCallResult=0x0 | out: ppObject=0x558f2a0*=0xfe47c0, ppCallResult=0x0) returned 0x0 [0100.495] CoGetContextToken (in: pToken=0x558f2b4 | out: pToken=0x558f2b4) returned 0x0 [0100.495] CoGetContextToken (in: pToken=0x558f2a4 | out: pToken=0x558f2a4) returned 0x0 [0100.495] CoGetMarshalSizeMax (in: pulSize=0x558f260, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0xff39e8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x558f260) returned 0x0 [0100.495] CoMarshalInterface (pStm=0xfb94d8, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0xff39e8, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0100.498] WbemLocator:IUnknown:QueryInterface (in: This=0xf78300, riid=0xfce554*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x558f0f4 | out: ppvObject=0x558f0f4*=0xf78300) returned 0x0 [0100.498] WbemLocator:IUnknown:QueryInterface (in: This=0xf78300, riid=0x718d4cd4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x558f02c | out: ppvObject=0x558f02c*=0xf78300) returned 0x0 [0100.498] WbemLocator:IUnknown:QueryInterface (in: This=0xf78300, riid=0x718d4cd4*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x558efa8 | out: ppvObject=0x558efa8*=0xf78300) returned 0x0 [0100.499] IWbemServices:GetObject (in: This=0xf78300, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x558f2a0*=0x0, ppCallResult=0x0 | out: ppObject=0x558f2a0*=0xff4328, ppCallResult=0x0) returned 0x0 Thread: id = 106 os_tid = 0x6d0 [0099.221] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0099.222] RoInitialize () returned 0x1 [0099.222] RoUninitialize () returned 0x0 [0099.223] CoGetClassObject (in: rclsid=0xfc3dfc*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x73bfb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x56cf328 | out: ppv=0x56cf328*=0xff38c8) returned 0x0 [0099.223] WbemLocator:IUnknown:QueryInterface (in: This=0xff38c8, riid=0x73c49e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x56cf544 | out: ppvObject=0x56cf544*=0x0) returned 0x80004002 [0099.223] WbemLocator:IClassFactory:CreateInstance (in: This=0xff38c8, pUnkOuter=0x0, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x56cf550 | out: ppvObject=0x56cf550*=0xff2d40) returned 0x0 [0099.224] WbemLocator:IUnknown:Release (This=0xff38c8) returned 0x0 [0099.224] WbemLocator:IUnknown:QueryInterface (in: This=0xff2d40, riid=0x73bc3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x56cf174 | out: ppvObject=0x56cf174*=0xff2d40) returned 0x0 [0099.224] WbemLocator:IUnknown:QueryInterface (in: This=0xff2d40, riid=0x73bf0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x56cf130 | out: ppvObject=0x56cf130*=0x0) returned 0x80004002 [0099.224] WbemLocator:IUnknown:QueryInterface (in: This=0xff2d40, riid=0x73bf0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x56ced24 | out: ppvObject=0x56ced24*=0x0) returned 0x80004002 [0099.224] WbemLocator:IUnknown:AddRef (This=0xff2d40) returned 0x3 [0099.224] WbemLocator:IUnknown:QueryInterface (in: This=0xff2d40, riid=0x73bf0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x56cea84 | out: ppvObject=0x56cea84*=0x0) returned 0x80004002 [0099.224] WbemLocator:IUnknown:QueryInterface (in: This=0xff2d40, riid=0x73beffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x56cea34 | out: ppvObject=0x56cea34*=0x0) returned 0x80004002 [0099.224] WbemLocator:IUnknown:QueryInterface (in: This=0xff2d40, riid=0x73b37604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x56cea40 | out: ppvObject=0x56cea40*=0x0) returned 0x80004002 [0099.224] CoGetContextToken (in: pToken=0x56ceaa0 | out: pToken=0x56ceaa0) returned 0x0 [0099.226] CoGetContextToken (in: pToken=0x56ceea8 | out: pToken=0x56ceea8) returned 0x0 [0099.226] WbemLocator:IUnknown:QueryInterface (in: This=0xff2d40, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x56cef34 | out: ppvObject=0x56cef34*=0x0) returned 0x80004002 [0099.226] WbemLocator:IUnknown:Release (This=0xff2d40) returned 0x2 [0099.226] WbemLocator:IUnknown:Release (This=0xff2d40) returned 0x1 [0099.226] CoGetContextToken (in: pToken=0x56cf530 | out: pToken=0x56cf530) returned 0x0 [0099.226] CoGetContextToken (in: pToken=0x56cf490 | out: pToken=0x56cf490) returned 0x0 [0099.226] WbemLocator:IUnknown:QueryInterface (in: This=0xff2d40, riid=0x56cf560*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x56cf55c | out: ppvObject=0x56cf55c*=0xff2d40) returned 0x0 [0099.227] WbemLocator:IUnknown:AddRef (This=0xff2d40) returned 0x3 [0099.227] WbemLocator:IUnknown:Release (This=0xff2d40) returned 0x2 [0099.227] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0xfde468, puCount=0x56cf6f8 | out: puCount=0x56cf6f8*=0x2) returned 0x0 [0099.227] WbemDefPath:IWbemPath:GetText (in: This=0xfde468, lFlags=8, puBuffLength=0x56cf6f4*=0x0, pszText=0x0 | out: puBuffLength=0x56cf6f4*=0xf, pszText=0x0) returned 0x0 [0099.227] WbemDefPath:IWbemPath:GetText (in: This=0xfde468, lFlags=8, puBuffLength=0x56cf6f4*=0xf, pszText="00000000000000" | out: puBuffLength=0x56cf6f4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0099.227] CoCreateInstance (in: rclsid=0x719a36ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x719a370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x56cf5b0 | out: ppv=0x56cf5b0*=0xff2cb0) returned 0x0 [0099.228] WbemLocator:IWbemLocator:ConnectServer (in: This=0xff2cb0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x56cf644 | out: ppNamespace=0x56cf644*=0xf78300) returned 0x0 [0100.386] WbemLocator:IUnknown:QueryInterface (in: This=0xf78300, riid=0x719a352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x56cf4d8 | out: ppvObject=0x56cf4d8*=0xf884b0) returned 0x0 [0100.386] WbemLocator:IClientSecurity:QueryBlanket (in: This=0xf884b0, pProxy=0xf78300, pAuthnSvc=0x56cf528, pAuthzSvc=0x56cf524, pServerPrincName=0x56cf51c, pAuthnLevel=0x56cf520, pImpLevel=0x56cf510, pAuthInfo=0x56cf514, pCapabilites=0x56cf518 | out: pAuthnSvc=0x56cf528*=0xa, pAuthzSvc=0x56cf524*=0x0, pServerPrincName=0x56cf51c, pAuthnLevel=0x56cf520*=0x6, pImpLevel=0x56cf510*=0x2, pAuthInfo=0x56cf514, pCapabilites=0x56cf518*=0x1) returned 0x0 [0100.386] WbemLocator:IUnknown:Release (This=0xf884b0) returned 0x1 [0100.386] WbemLocator:IUnknown:QueryInterface (in: This=0xf78300, riid=0x719a351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x56cf4cc | out: ppvObject=0x56cf4cc*=0xf884d4) returned 0x0 [0100.386] WbemLocator:IUnknown:QueryInterface (in: This=0xf78300, riid=0x719a352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x56cf4b8 | out: ppvObject=0x56cf4b8*=0xf884b0) returned 0x0 [0100.386] WbemLocator:IClientSecurity:SetBlanket (This=0xf884b0, pProxy=0xf78300, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0100.387] WbemLocator:IUnknown:Release (This=0xf884b0) returned 0x2 [0100.387] WbemLocator:IUnknown:Release (This=0xf884d4) returned 0x1 [0100.387] CoTaskMemFree (pv=0xfc3dc0) [0100.387] WbemLocator:IUnknown:AddRef (This=0xf78300) returned 0x2 [0100.387] WbemLocator:IUnknown:Release (This=0xff2cb0) returned 0x0 [0100.387] CoGetContextToken (in: pToken=0x56ce9f8 | out: pToken=0x56ce9f8) returned 0x0 [0100.387] CoGetContextToken (in: pToken=0x56cee00 | out: pToken=0x56cee00) returned 0x0 [0100.387] WbemLocator:IUnknown:QueryInterface (in: This=0xf78300, riid=0x73bf02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x56ced98 | out: ppvObject=0x56ced98*=0xf884b8) returned 0x0 [0100.388] WbemLocator:IRpcOptions:Query (in: This=0xf884b8, pPrx=0xff39e8, dwProperty=2, pdwValue=0x56cee98 | out: pdwValue=0x56cee98) returned 0x80004002 [0100.388] WbemLocator:IUnknown:Release (This=0xf884b8) returned 0x2 [0100.388] CoGetContextToken (in: pToken=0x56cf3d8 | out: pToken=0x56cf3d8) returned 0x0 [0100.388] CoGetContextToken (in: pToken=0x56cf338 | out: pToken=0x56cf338) returned 0x0 [0100.388] WbemLocator:IUnknown:QueryInterface (in: This=0xf78300, riid=0x56cf408*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x56cf2d0 | out: ppvObject=0x56cf2d0*=0xf78300) returned 0x0 [0100.388] WbemLocator:IUnknown:Release (This=0xf78300) returned 0x2 [0100.388] SysStringLen (param_1=0x0) returned 0x0 [0100.389] CoUninitialize () Thread: id = 107 os_tid = 0x1300 Thread: id = 108 os_tid = 0x1078 Thread: id = 110 os_tid = 0xf30 [0107.737] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0107.737] RoInitialize () returned 0x1 [0107.737] RoUninitialize () returned 0x0 [0107.738] ResetEvent (hEvent=0x4cc) returned 1 Thread: id = 118 os_tid = 0xd44 Thread: id = 129 os_tid = 0x58 Thread: id = 133 os_tid = 0x5c4 Thread: id = 153 os_tid = 0xda4 [0155.684] SleepEx (dwMilliseconds=0x14, bAlertable=0) Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x742fe000" os_pid = "0x3ac" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xa], "NT SERVICE\\wuauserv" [0xa], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 10 os_tid = 0xee4 Thread: id = 11 os_tid = 0x1254 Thread: id = 12 os_tid = 0x1394 Thread: id = 13 os_tid = 0x1390 Thread: id = 14 os_tid = 0x138c Thread: id = 15 os_tid = 0x1388 Thread: id = 16 os_tid = 0x1384 Thread: id = 17 os_tid = 0x1380 Thread: id = 18 os_tid = 0x133c Thread: id = 19 os_tid = 0x12d0 Thread: id = 20 os_tid = 0x12cc Thread: id = 21 os_tid = 0x12c8 Thread: id = 22 os_tid = 0x12c4 Thread: id = 23 os_tid = 0x12b8 Thread: id = 24 os_tid = 0x1290 Thread: id = 25 os_tid = 0x128c Thread: id = 26 os_tid = 0x1288 Thread: id = 27 os_tid = 0x11a8 Thread: id = 28 os_tid = 0x11a4 Thread: id = 29 os_tid = 0x11a0 Thread: id = 30 os_tid = 0x1148 Thread: id = 31 os_tid = 0x1144 Thread: id = 32 os_tid = 0x1140 Thread: id = 33 os_tid = 0x1138 Thread: id = 34 os_tid = 0x1100 Thread: id = 35 os_tid = 0x10fc Thread: id = 36 os_tid = 0x10f8 Thread: id = 37 os_tid = 0x10f4 Thread: id = 38 os_tid = 0x10f0 Thread: id = 39 os_tid = 0x10e4 Thread: id = 40 os_tid = 0x10d8 Thread: id = 41 os_tid = 0xfb0 Thread: id = 42 os_tid = 0xfac Thread: id = 43 os_tid = 0xfa8 Thread: id = 44 os_tid = 0xee8 Thread: id = 45 os_tid = 0xaa0 Thread: id = 46 os_tid = 0xa30 Thread: id = 47 os_tid = 0xa14 Thread: id = 48 os_tid = 0xa0c Thread: id = 49 os_tid = 0x9e8 Thread: id = 50 os_tid = 0x9e0 Thread: id = 51 os_tid = 0x9d8 Thread: id = 52 os_tid = 0x9cc Thread: id = 53 os_tid = 0x9c4 Thread: id = 54 os_tid = 0x9b8 Thread: id = 55 os_tid = 0x9b0 Thread: id = 56 os_tid = 0x9a0 Thread: id = 57 os_tid = 0x998 Thread: id = 58 os_tid = 0x984 Thread: id = 59 os_tid = 0x978 Thread: id = 60 os_tid = 0x968 Thread: id = 61 os_tid = 0x95c Thread: id = 62 os_tid = 0x958 Thread: id = 63 os_tid = 0x944 Thread: id = 64 os_tid = 0x930 Thread: id = 65 os_tid = 0x914 Thread: id = 66 os_tid = 0x8ac Thread: id = 67 os_tid = 0x840 Thread: id = 68 os_tid = 0x83c Thread: id = 69 os_tid = 0x430 Thread: id = 70 os_tid = 0x7c0 Thread: id = 71 os_tid = 0x7bc Thread: id = 72 os_tid = 0x7ac Thread: id = 73 os_tid = 0x784 Thread: id = 74 os_tid = 0x780 Thread: id = 75 os_tid = 0x77c Thread: id = 76 os_tid = 0x6fc Thread: id = 77 os_tid = 0x678 Thread: id = 78 os_tid = 0x670 Thread: id = 79 os_tid = 0x660 Thread: id = 80 os_tid = 0x654 Thread: id = 81 os_tid = 0x61c Thread: id = 82 os_tid = 0x5d0 Thread: id = 83 os_tid = 0x5a0 Thread: id = 84 os_tid = 0x4ac Thread: id = 85 os_tid = 0x41c Thread: id = 86 os_tid = 0x414 Thread: id = 87 os_tid = 0x404 Thread: id = 88 os_tid = 0x158 Thread: id = 89 os_tid = 0x39c Thread: id = 90 os_tid = 0x2e8 Thread: id = 91 os_tid = 0x180 Thread: id = 92 os_tid = 0x234 Thread: id = 93 os_tid = 0x26c Thread: id = 94 os_tid = 0x2a0 Thread: id = 95 os_tid = 0x170 Thread: id = 96 os_tid = 0x1a8 Thread: id = 97 os_tid = 0x16c Thread: id = 98 os_tid = 0x3b0 Thread: id = 100 os_tid = 0x12f0 Thread: id = 101 os_tid = 0x4b4 Thread: id = 102 os_tid = 0x1304 Thread: id = 103 os_tid = 0x1310 Thread: id = 104 os_tid = 0x12a4 Thread: id = 105 os_tid = 0xe6c Thread: id = 109 os_tid = 0xf48 Thread: id = 111 os_tid = 0xfb8 Thread: id = 112 os_tid = 0x518 Thread: id = 113 os_tid = 0xcdc Thread: id = 114 os_tid = 0x384 Thread: id = 115 os_tid = 0x514 Thread: id = 116 os_tid = 0x900 Thread: id = 117 os_tid = 0xcf8 Thread: id = 119 os_tid = 0xc18 Thread: id = 130 os_tid = 0xb70 Thread: id = 131 os_tid = 0xc48 Thread: id = 132 os_tid = 0xdc4 Thread: id = 145 os_tid = 0xea8 Thread: id = 146 os_tid = 0xf84 Thread: id = 147 os_tid = 0x484 Thread: id = 148 os_tid = 0x6d8 Thread: id = 149 os_tid = 0xa28 Thread: id = 150 os_tid = 0x1010 Thread: id = 154 os_tid = 0xf68 Thread: id = 176 os_tid = 0x794 Thread: id = 178 os_tid = 0x13fc Thread: id = 179 os_tid = 0x1368 Thread: id = 180 os_tid = 0x1090 Thread: id = 181 os_tid = 0x7b0 Thread: id = 182 os_tid = 0x1364 Thread: id = 203 os_tid = 0x550 Thread: id = 204 os_tid = 0x7f0 Thread: id = 205 os_tid = 0xd1c Thread: id = 206 os_tid = 0xd00 Thread: id = 207 os_tid = 0xab4 Thread: id = 208 os_tid = 0xd50 Thread: id = 612 os_tid = 0xf90 Process: id = "3" image_name = "taskhostw.exe" filename = "c:\\windows\\system32\\taskhostw.exe" page_root = "0x8554000" os_pid = "0x121c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x3ac" cmd_line = "taskhostw.exe Logon" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 120 os_tid = 0x1330 Thread: id = 121 os_tid = 0x12b0 Thread: id = 122 os_tid = 0x127c Thread: id = 123 os_tid = 0x1278 Thread: id = 124 os_tid = 0x1274 Thread: id = 125 os_tid = 0x1260 Thread: id = 126 os_tid = 0x1250 Thread: id = 127 os_tid = 0x1220 Thread: id = 128 os_tid = 0xda0 Process: id = "4" image_name = "trustedinstaller.exe" filename = "c:\\windows\\servicing\\trustedinstaller.exe" page_root = "0x1de7d000" os_pid = "0x9d0" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\servicing\\TrustedInstaller.exe" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\TrustedInstaller" [0xe], "NT AUTHORITY\\Logon Session 00000000:0008edbe" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 134 os_tid = 0x908 Thread: id = 135 os_tid = 0xa6c Thread: id = 136 os_tid = 0xa90 Thread: id = 137 os_tid = 0xcd0 Thread: id = 138 os_tid = 0xc90 Thread: id = 139 os_tid = 0xdf8 Thread: id = 140 os_tid = 0xafc Thread: id = 141 os_tid = 0x910 Thread: id = 142 os_tid = 0xb9c Process: id = "5" image_name = "taskhostw.exe" filename = "c:\\windows\\system32\\taskhostw.exe" page_root = "0x60357000" os_pid = "0xe48" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x3ac" cmd_line = "taskhostw.exe -RegisterDevice -SettingChange -Full" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xe], "NT SERVICE\\wlidsvc" [0xe], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 143 os_tid = 0xd94 Thread: id = 144 os_tid = 0xc20 Thread: id = 162 os_tid = 0x13d8 Thread: id = 190 os_tid = 0x1184 Thread: id = 196 os_tid = 0x1154 Thread: id = 197 os_tid = 0x11e4 Thread: id = 199 os_tid = 0x114c Process: id = "6" image_name = "powershell.exe" filename = "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x20dee000" os_pid = "0x1060" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x1180" cmd_line = "powershell.exe /c Start-Sleep -s 1 ;Remove-Item –Path C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 151 os_tid = 0x1074 [0159.249] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0159.253] RoInitialize () returned 0x1 [0159.253] RoUninitialize () returned 0x0 [0160.879] SysStringByteLen (bstr="Microsoft.PowerShell.ConsoleHost, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=msil") returned 0xfe [0160.880] SysStringByteLen (bstr="Microsoft.PowerShell.UnmanagedPSEntry") returned 0x4a [0162.453] SysStringByteLen (bstr="/c") returned 0x4 [0162.454] SysStringByteLen (bstr="/c") returned 0x4 [0162.454] SysStringByteLen (bstr="Start-Sleep") returned 0x16 [0162.454] SysStringByteLen (bstr="Start-Sleep") returned 0x16 [0162.454] SysStringByteLen (bstr="-s") returned 0x4 [0162.454] SysStringByteLen (bstr="-s") returned 0x4 [0162.454] SysStringByteLen (bstr="1") returned 0x2 [0162.454] SysStringByteLen (bstr="1") returned 0x2 [0162.454] SysStringByteLen (bstr=";Remove-Item") returned 0x18 [0162.454] SysStringByteLen (bstr=";Remove-Item") returned 0x18 [0162.454] SysStringByteLen (bstr="–Path") returned 0xa [0162.454] SysStringByteLen (bstr="–Path") returned 0xa [0162.454] SysStringByteLen (bstr="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe") returned 0x44 [0162.454] SysStringByteLen (bstr="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe") returned 0x44 [0165.161] WindowsCreateStringReference () returned 0x0 [0165.161] RoGetActivationFactory () returned 0x0 [0165.174] QueryInterface () returned 0x0 [0165.175] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0165.175] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0165.175] QueryInterface () returned 0x0 [0165.175] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::GetRuntimeClassName () returned 0x8000000e [0165.175] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0165.175] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::AddRef () returned 0x4 [0165.175] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0165.175] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0165.175] Release () returned 0x4 [0165.176] CoGetContextToken (in: pToken=0xebd390 | out: pToken=0xebd390) returned 0x0 [0165.176] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0165.177] CoGetContextToken (in: pToken=0xebd6a0 | out: pToken=0xebd6a0) returned 0x0 [0165.177] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0165.177] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x4 [0165.177] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0165.177] WindowsDeleteString () returned 0x0 [0165.177] Release () returned 0x2 [0165.177] CoGetContextToken (in: pToken=0xebde18 | out: pToken=0xebde18) returned 0x0 [0165.338] CoGetContextToken (in: pToken=0xebdd78 | out: pToken=0xebdd78) returned 0x0 [0165.338] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0165.338] AddRef () returned 0x4 [0165.338] Release () returned 0x3 [0165.393] IIDFromString (in: lpsz="{410B7711-FF3B-477F-9C9A-D2EFDA302DC3}", lpiid=0xebd4b0 | out: lpiid=0xebd4b0) returned 0x0 [0165.395] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::add_TracingStatusChanged () returned 0x0 [0165.517] GenericStreamBase::Write () returned 0x0 [0165.517] GenericStreamBase::Write () returned 0x0 [0165.518] CoCreateGuid (in: pguid=0x741647a8 | out: pguid=0x741647a8*(Data1=0x224d3bfe, Data2=0xa6be, Data3=0x454e, Data4=([0]=0xab, [1]=0xb5, [2]=0x3, [3]=0x44, [4]=0x2e, [5]=0x8c, [6]=0xc2, [7]=0x93))) returned 0x0 [0165.518] GenericStreamBase::Write () returned 0x0 [0166.166] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0166.166] CExtensionCatalog::AddRef () returned 0x3 [0166.166] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0166.166] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0166.166] Release () returned 0x3 [0166.166] CoGetContextToken (in: pToken=0xebd268 | out: pToken=0xebd268) returned 0x0 [0166.166] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0166.168] WindowsCreateString () returned 0x0 [0166.169] CExtensionCatalog::AddRef () returned 0x4 [0166.169] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0166.170] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0166.203] EtwEventRegister (in: ProviderId=0x4ea5c08, EnableCallback=0x4c72bc6, CallbackContext=0x0, RegHandle=0x4ea5be4 | out: RegHandle=0x4ea5be4) returned 0x0 [0166.229] EtwEventRegister (in: ProviderId=0x4ea630c, EnableCallback=0x4c72bee, CallbackContext=0x0, RegHandle=0x4ea62e8 | out: RegHandle=0x4ea62e8) returned 0x0 [0166.229] EtwEventSetInformation (RegHandle=0x1059150, InformationClass=0x2d, EventInformation=0x2, InformationLength=0x4ea62ac) returned 0x0 [0169.693] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0xebe7a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0xebe7a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0169.872] EtwEventActivityIdControl (in: ControlCode=0x3, ActivityId=0xebe7a4*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0xebe7a4*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x93, [1]=0x50, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0169.873] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0xebe754*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0xebe754*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0169.897] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0xebe7b4*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x93, [1]=0x50, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0xebe7b4*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x93, [1]=0x50, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0169.919] EtwEventRegister (in: ProviderId=0x4eaa1cc, EnableCallback=0x4c72c16, CallbackContext=0x0, RegHandle=0x4eaa1a4 | out: RegHandle=0x4eaa1a4) returned 0x0 [0170.067] EtwEventWriteTransfer (RegHandle=0x1058730, EventDescriptor=0x2e, ActivityId=0xebe7c8, RelatedActivityId=0xebe774, UserDataCount=0x0, UserData=0x0) returned 0x0 [0170.221] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x104, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0170.222] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x88 [0170.222] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x88, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0170.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe678) returned 1 [0170.222] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.management.automation\\v4.0_3.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0xebe6f4 | out: lpFileInformation=0xebe6f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce8766, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x71ce8766, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x71d0e9d1, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x623400)) returned 1 [0170.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe674) returned 1 [0170.317] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0xebe768 | out: lpdwHandle=0xebe768) returned 0x94c [0170.461] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x4eaae7c | out: lpData=0x4eaae7c) returned 1 [0170.464] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xebe73c, puLen=0xebe738 | out: lplpBuffer=0xebe73c*=0x4eaaf18, puLen=0xebe738) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eaaff4, puLen=0xebe6b8) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eab048, puLen=0xebe6b8) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eab0a4, puLen=0xebe6b8) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eab0e4, puLen=0xebe6b8) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eab14c, puLen=0xebe6b8) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eab1e8, puLen=0xebe6b8) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eab24c, puLen=0xebe6b8) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eab2c8, puLen=0xebe6b8) returned 1 [0170.470] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x4eaaf70, puLen=0xebe6b8) returned 1 [0170.471] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x0, puLen=0xebe6b8) returned 0 [0170.471] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x0, puLen=0xebe6b8) returned 0 [0170.471] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0xebe6bc, puLen=0xebe6b8 | out: lplpBuffer=0xebe6bc*=0x0, puLen=0xebe6b8) returned 0 [0170.471] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0xebe6b0, puLen=0xebe6ac | out: lplpBuffer=0xebe6b0*=0x4eaaf18, puLen=0xebe6ac) returned 1 [0170.471] VerLanguageNameW (in: wLang=0x0, szLang=0xebe440, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0170.533] VerQueryValueW (in: pBlock=0x4eaae7c, lpSubBlock="\\", lplpBuffer=0xebe6c0, puLen=0xebe6bc | out: lplpBuffer=0xebe6c0*=0x4eaaea4, puLen=0xebe6bc) returned 1 [0170.536] GetCurrentProcessId () returned 0x1060 [0170.552] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0xebdf84 | out: lpLuid=0xebdf84*(LowPart=0x14, HighPart=0)) returned 1 [0170.557] GetCurrentProcess () returned 0xffffffff [0170.567] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0xebdf80 | out: TokenHandle=0xebdf80*=0x388) returned 1 [0170.567] AdjustTokenPrivileges (in: TokenHandle=0x388, DisableAllPrivileges=0, NewState=0x4eafa80*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0170.570] CloseHandle (hObject=0x388) returned 1 [0170.601] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1060) returned 0x388 [0170.756] EnumProcessModules (in: hProcess=0x388, lphModule=0x4eb0448, cb=0x100, lpcbNeeded=0xebe6f0 | out: lphModule=0x4eb0448, lpcbNeeded=0xebe6f0) returned 1 [0170.758] GetModuleInformation (in: hProcess=0x388, hModule=0x1250000, lpmodinfo=0x4eb0588, cb=0xc | out: lpmodinfo=0x4eb0588*(lpBaseOfDll=0x1250000, SizeOfImage=0x6c000, EntryPoint=0x12595f0)) returned 1 [0170.758] CoTaskMemAlloc (cb=0x804) returned 0x10ca780 [0170.758] GetModuleBaseNameW (in: hProcess=0x388, hModule=0x1250000, lpBaseName=0x10ca780, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0170.759] CoTaskMemFree (pv=0x10ca780) [0170.759] CoTaskMemAlloc (cb=0x804) returned 0x10ca780 [0170.759] GetModuleFileNameExW (in: hProcess=0x388, hModule=0x1250000, lpFilename=0x10ca780, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0170.760] CoTaskMemFree (pv=0x10ca780) [0170.760] CloseHandle (hObject=0x388) returned 1 [0170.761] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x1060) returned 0x388 [0170.762] GetExitCodeProcess (in: hProcess=0x388, lpExitCode=0x4eae0f4 | out: lpExitCode=0x4eae0f4*=0x103) returned 1 [0170.774] EnumWindows (lpEnumFunc=0x4c72c3e, lParam=0x0) returned 1 [0170.776] GetWindowThreadProcessId (in: hWnd=0x10158, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xae8 [0170.776] GetWindowThreadProcessId (in: hWnd=0x10124, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.776] GetWindowThreadProcessId (in: hWnd=0x100cc, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.777] GetWindowThreadProcessId (in: hWnd=0x100c8, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.777] GetWindowThreadProcessId (in: hWnd=0x100c4, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.777] GetWindowThreadProcessId (in: hWnd=0x100c0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.777] GetWindowThreadProcessId (in: hWnd=0x100ac, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.777] GetWindowThreadProcessId (in: hWnd=0x100a4, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.777] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.777] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.778] GetWindowThreadProcessId (in: hWnd=0x100d0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.778] GetWindowThreadProcessId (in: hWnd=0x100d4, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.778] GetWindowThreadProcessId (in: hWnd=0x10090, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.778] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc9c [0170.778] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5cc [0170.778] GetWindowThreadProcessId (in: hWnd=0x100de, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.778] GetWindowThreadProcessId (in: hWnd=0x302c6, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1074 [0170.779] GetWindow (hWnd=0x302c6, uCmd=0x4) returned 0x0 [0170.779] IsWindowVisible (hWnd=0x302c6) returned 0 [0170.779] GetWindowThreadProcessId (in: hWnd=0x202ba, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x106c [0170.780] GetWindowThreadProcessId (in: hWnd=0x502ac, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1250 [0170.780] GetWindowThreadProcessId (in: hWnd=0x102b6, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1058 [0170.780] GetWindowThreadProcessId (in: hWnd=0x102b0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1044 [0170.780] GetWindowThreadProcessId (in: hWnd=0x202aa, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1030 [0170.780] GetWindowThreadProcessId (in: hWnd=0x102a6, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x101c [0170.780] GetWindowThreadProcessId (in: hWnd=0x102a2, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1008 [0170.781] GetWindowThreadProcessId (in: hWnd=0x1029e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf20 [0170.781] GetWindowThreadProcessId (in: hWnd=0x20298, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd70 [0170.781] GetWindowThreadProcessId (in: hWnd=0x20294, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xfd4 [0170.781] GetWindowThreadProcessId (in: hWnd=0x20290, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf40 [0170.781] GetWindowThreadProcessId (in: hWnd=0x1028e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xef0 [0170.781] GetWindowThreadProcessId (in: hWnd=0x1028a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1ec [0170.781] GetWindowThreadProcessId (in: hWnd=0x10286, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdfc [0170.782] GetWindowThreadProcessId (in: hWnd=0x10282, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdc8 [0170.782] GetWindowThreadProcessId (in: hWnd=0x2027c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xabc [0170.782] GetWindowThreadProcessId (in: hWnd=0x1027a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd40 [0170.782] GetWindowThreadProcessId (in: hWnd=0x10276, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x97c [0170.782] GetWindowThreadProcessId (in: hWnd=0x20272, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd14 [0170.782] GetWindowThreadProcessId (in: hWnd=0x2026c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf78 [0170.783] GetWindowThreadProcessId (in: hWnd=0x20268, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xffc [0170.783] GetWindowThreadProcessId (in: hWnd=0x20266, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf58 [0170.783] GetWindowThreadProcessId (in: hWnd=0x20262, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf7c [0170.783] GetWindowThreadProcessId (in: hWnd=0x10260, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf80 [0170.783] GetWindowThreadProcessId (in: hWnd=0x1025c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xed8 [0170.784] GetWindowThreadProcessId (in: hWnd=0x10258, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf1c [0170.784] GetWindowThreadProcessId (in: hWnd=0x20252, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdb0 [0170.784] GetWindowThreadProcessId (in: hWnd=0x10250, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf08 [0170.784] GetWindowThreadProcessId (in: hWnd=0x2024c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xef4 [0170.784] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xeb8 [0170.784] GetWindowThreadProcessId (in: hWnd=0x10244, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf4 [0170.785] GetWindowThreadProcessId (in: hWnd=0x10240, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xba0 [0170.785] GetWindowThreadProcessId (in: hWnd=0x2023a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xe90 [0170.785] GetWindowThreadProcessId (in: hWnd=0x20236, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5a4 [0170.785] GetWindowThreadProcessId (in: hWnd=0x20232, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x664 [0170.785] GetWindowThreadProcessId (in: hWnd=0x2022e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5c8 [0170.785] GetWindowThreadProcessId (in: hWnd=0x2022a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x804 [0170.786] GetWindowThreadProcessId (in: hWnd=0x10228, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc74 [0170.786] GetWindowThreadProcessId (in: hWnd=0x20222, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xe04 [0170.786] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xa8c [0170.786] GetWindowThreadProcessId (in: hWnd=0x2021a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x56c [0170.786] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x8f0 [0170.786] GetWindowThreadProcessId (in: hWnd=0x20214, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x85c [0170.787] GetWindowThreadProcessId (in: hWnd=0x10210, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdd8 [0170.787] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdcc [0170.787] GetWindowThreadProcessId (in: hWnd=0x20206, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xba4 [0170.787] GetWindowThreadProcessId (in: hWnd=0x20204, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x29c [0170.788] GetWindowThreadProcessId (in: hWnd=0x20200, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xde0 [0170.788] GetWindowThreadProcessId (in: hWnd=0x40074, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd8c [0170.788] GetWindowThreadProcessId (in: hWnd=0x3007a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd30 [0170.788] GetWindowThreadProcessId (in: hWnd=0x50062, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd7c [0170.789] GetWindowThreadProcessId (in: hWnd=0x40052, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd78 [0170.789] GetWindowThreadProcessId (in: hWnd=0x30054, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xa74 [0170.789] GetWindowThreadProcessId (in: hWnd=0x30068, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd5c [0170.789] GetWindowThreadProcessId (in: hWnd=0x3005a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd58 [0170.789] GetWindowThreadProcessId (in: hWnd=0x401ea, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x680 [0170.790] GetWindowThreadProcessId (in: hWnd=0x30056, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xcfc [0170.790] GetWindowThreadProcessId (in: hWnd=0x30176, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xa24 [0170.790] GetWindowThreadProcessId (in: hWnd=0x601e0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x368 [0170.790] GetWindowThreadProcessId (in: hWnd=0x6014e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x4f8 [0170.790] GetWindowThreadProcessId (in: hWnd=0x5002a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x380 [0170.790] GetWindowThreadProcessId (in: hWnd=0x30106, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x4f4 [0170.791] GetWindowThreadProcessId (in: hWnd=0x30154, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x764 [0170.791] GetWindowThreadProcessId (in: hWnd=0x30150, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xff0 [0170.791] GetWindowThreadProcessId (in: hWnd=0x300e0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xfdc [0170.791] GetWindowThreadProcessId (in: hWnd=0x500ea, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xfc8 [0170.791] GetWindowThreadProcessId (in: hWnd=0x101fc, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xcc8 [0170.792] GetWindowThreadProcessId (in: hWnd=0x101f4, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc9c [0170.792] GetWindowThreadProcessId (in: hWnd=0x101d6, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc9c [0170.792] GetWindowThreadProcessId (in: hWnd=0x101d0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc98 [0170.792] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc98 [0170.792] GetWindowThreadProcessId (in: hWnd=0x101c0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc9c [0170.793] GetWindowThreadProcessId (in: hWnd=0x10198, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc38 [0170.793] GetWindowThreadProcessId (in: hWnd=0x10196, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.793] GetWindowThreadProcessId (in: hWnd=0x10192, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc38 [0170.793] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.793] GetWindowThreadProcessId (in: hWnd=0x1018c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.794] GetWindowThreadProcessId (in: hWnd=0x1018e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.794] GetWindowThreadProcessId (in: hWnd=0x10144, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.794] GetWindowThreadProcessId (in: hWnd=0x1013c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.794] GetWindowThreadProcessId (in: hWnd=0x200b2, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5cc [0170.794] GetWindowThreadProcessId (in: hWnd=0x1011a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.795] GetWindowThreadProcessId (in: hWnd=0x10112, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.795] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.795] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5cc [0170.795] GetWindowThreadProcessId (in: hWnd=0x100fc, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x8f8 [0170.795] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.795] GetWindowThreadProcessId (in: hWnd=0x100d2, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.796] GetWindowThreadProcessId (in: hWnd=0x20070, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc98 [0170.796] GetWindowThreadProcessId (in: hWnd=0x100ae, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.796] GetWindowThreadProcessId (in: hWnd=0x10088, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x7b4 [0170.796] GetWindowThreadProcessId (in: hWnd=0x10082, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5cc [0170.796] GetWindowThreadProcessId (in: hWnd=0x20066, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5cc [0170.797] GetWindowThreadProcessId (in: hWnd=0x20032, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x7e8 [0170.797] GetWindowThreadProcessId (in: hWnd=0x1003a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x374 [0170.797] GetWindowThreadProcessId (in: hWnd=0x2006c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x44c [0170.797] GetWindowThreadProcessId (in: hWnd=0x100f0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5cc [0170.797] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xae8 [0170.797] GetWindowThreadProcessId (in: hWnd=0x100e6, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.798] GetWindowThreadProcessId (in: hWnd=0x10092, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x80c [0170.798] GetWindowThreadProcessId (in: hWnd=0x302c4, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xbdc [0170.798] GetWindowThreadProcessId (in: hWnd=0x102bc, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x106c [0170.798] GetWindowThreadProcessId (in: hWnd=0x102b8, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1058 [0170.798] GetWindowThreadProcessId (in: hWnd=0x202b4, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1044 [0170.798] GetWindowThreadProcessId (in: hWnd=0x102ae, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1030 [0170.798] GetWindowThreadProcessId (in: hWnd=0x102a8, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x101c [0170.799] GetWindowThreadProcessId (in: hWnd=0x202a4, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1008 [0170.799] GetWindowThreadProcessId (in: hWnd=0x202a0, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf20 [0170.799] GetWindowThreadProcessId (in: hWnd=0x2029c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd70 [0170.799] GetWindowThreadProcessId (in: hWnd=0x1029a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xfd4 [0170.799] GetWindowThreadProcessId (in: hWnd=0x10296, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf40 [0170.799] GetWindowThreadProcessId (in: hWnd=0x10292, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xef0 [0170.800] GetWindowThreadProcessId (in: hWnd=0x2028c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x1ec [0170.800] GetWindowThreadProcessId (in: hWnd=0x20288, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdfc [0170.800] GetWindowThreadProcessId (in: hWnd=0x20284, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdc8 [0170.800] GetWindowThreadProcessId (in: hWnd=0x20280, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xabc [0170.800] GetWindowThreadProcessId (in: hWnd=0x1027e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd40 [0170.800] GetWindowThreadProcessId (in: hWnd=0x20278, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x97c [0170.800] GetWindowThreadProcessId (in: hWnd=0x20274, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd14 [0170.801] GetWindowThreadProcessId (in: hWnd=0x10270, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf78 [0170.801] GetWindowThreadProcessId (in: hWnd=0x1026e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xffc [0170.801] GetWindowThreadProcessId (in: hWnd=0x1026a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf58 [0170.801] GetWindowThreadProcessId (in: hWnd=0x5012a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf7c [0170.801] GetWindowThreadProcessId (in: hWnd=0x10264, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf80 [0170.801] GetWindowThreadProcessId (in: hWnd=0x2025e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xed8 [0170.802] GetWindowThreadProcessId (in: hWnd=0x2025a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf1c [0170.802] GetWindowThreadProcessId (in: hWnd=0x20256, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdb0 [0170.802] GetWindowThreadProcessId (in: hWnd=0x10254, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf08 [0170.802] GetWindowThreadProcessId (in: hWnd=0x2024e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xef4 [0170.802] GetWindowThreadProcessId (in: hWnd=0x1024a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xeb8 [0170.802] GetWindowThreadProcessId (in: hWnd=0x20246, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xf4 [0170.933] GetWindowThreadProcessId (in: hWnd=0x20242, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xba0 [0170.934] GetWindowThreadProcessId (in: hWnd=0x2023e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xe90 [0170.934] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5a4 [0170.934] GetWindowThreadProcessId (in: hWnd=0x10238, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x664 [0170.934] GetWindowThreadProcessId (in: hWnd=0x10234, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5c8 [0170.934] GetWindowThreadProcessId (in: hWnd=0x10230, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x804 [0170.934] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc74 [0170.935] GetWindowThreadProcessId (in: hWnd=0x20226, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xe04 [0170.935] GetWindowThreadProcessId (in: hWnd=0x10224, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xa8c [0170.935] GetWindowThreadProcessId (in: hWnd=0x2021e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x56c [0170.935] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x8f0 [0170.935] GetWindowThreadProcessId (in: hWnd=0x20216, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x85c [0170.935] GetWindowThreadProcessId (in: hWnd=0x10212, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdd8 [0170.935] GetWindowThreadProcessId (in: hWnd=0x2020e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xdcc [0170.936] GetWindowThreadProcessId (in: hWnd=0x2020a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xba4 [0170.936] GetWindowThreadProcessId (in: hWnd=0x10208, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x29c [0170.936] GetWindowThreadProcessId (in: hWnd=0x10202, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xde0 [0170.936] GetWindowThreadProcessId (in: hWnd=0x301e6, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd8c [0170.936] GetWindowThreadProcessId (in: hWnd=0x20076, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd30 [0170.936] GetWindowThreadProcessId (in: hWnd=0x2007c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd7c [0170.936] GetWindowThreadProcessId (in: hWnd=0x20078, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd78 [0170.937] GetWindowThreadProcessId (in: hWnd=0x40072, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xa74 [0170.937] GetWindowThreadProcessId (in: hWnd=0x20050, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd5c [0170.937] GetWindowThreadProcessId (in: hWnd=0x2004e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xd58 [0170.937] GetWindowThreadProcessId (in: hWnd=0x3004a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x680 [0170.937] GetWindowThreadProcessId (in: hWnd=0x30058, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xcfc [0170.937] GetWindowThreadProcessId (in: hWnd=0x4005e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xa24 [0170.937] GetWindowThreadProcessId (in: hWnd=0x201da, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x368 [0170.937] GetWindowThreadProcessId (in: hWnd=0x3006a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x4f8 [0170.938] GetWindowThreadProcessId (in: hWnd=0x50048, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x380 [0170.938] GetWindowThreadProcessId (in: hWnd=0x3002c, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x4f4 [0170.938] GetWindowThreadProcessId (in: hWnd=0x20152, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x764 [0170.938] GetWindowThreadProcessId (in: hWnd=0x20156, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xff0 [0170.938] GetWindowThreadProcessId (in: hWnd=0x201b8, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xfdc [0170.938] GetWindowThreadProcessId (in: hWnd=0x200e2, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xfc8 [0170.938] GetWindowThreadProcessId (in: hWnd=0x101fe, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xcc8 [0170.939] GetWindowThreadProcessId (in: hWnd=0x101ce, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc98 [0170.939] GetWindowThreadProcessId (in: hWnd=0x101c2, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc9c [0170.939] GetWindowThreadProcessId (in: hWnd=0x10194, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0xc38 [0170.939] GetWindowThreadProcessId (in: hWnd=0x1011e, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5cc [0170.939] GetWindowThreadProcessId (in: hWnd=0x10110, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x940 [0170.939] GetWindowThreadProcessId (in: hWnd=0x100fe, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x8f8 [0170.939] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x7b4 [0170.940] GetWindowThreadProcessId (in: hWnd=0x10080, lpdwProcessId=0xebe654 | out: lpdwProcessId=0xebe654) returned 0x5cc [0170.971] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x5ea94c8, Length=0x20000, ResultLength=0xebe728 | out: SystemInformation=0x5ea94c8, ResultLength=0xebe728*=0x247d0) returned 0xc0000004 [0170.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x5ec94e8, Length=0x26fd0, ResultLength=0xebe728 | out: SystemInformation=0x5ec94e8, ResultLength=0xebe728*=0x1a7c0) returned 0x0 [0171.149] WerSetFlags () returned 0x0 [0171.158] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0171.598] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xebe740, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xebe73c | out: pulNumLanguages=0xebe740, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0xebe73c) returned 1 [0171.631] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0xebe740, pwszLanguagesBuffer=0x4edb94c, pcchLanguagesBuffer=0xebe73c | out: pulNumLanguages=0xebe740, pwszLanguagesBuffer=0x4edb94c, pcchLanguagesBuffer=0xebe73c) returned 1 [0171.639] GetUserDefaultLocaleName (in: lpLocaleName=0xebe6d4, cchLocaleName=16 | out: lpLocaleName="en-US") returned 6 [0171.691] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0xebde84, nSize=0x80 | out: lpBuffer="￿￿?ëဢ玱㦀牲皴犫佚玺⒆篠漈Ĉ皴犫㦀牲胰犖㦀牲胰犖?ë啾玺￿￿?ë꛰琇￿￿佚玺刐玺䪌犵") returned 0x0 [0171.692] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0xebde84, nSize=0x80 | out: lpBuffer="￿￿ᚼČ?ëᩚ珇㉰Ć\x01⌀") returned 0x0 [0173.572] CoCreateGuid (in: pguid=0xebddf4 | out: pguid=0xebddf4*(Data1=0xfeb3db48, Data2=0xcfe8, Data3=0x4479, Data4=([0]=0x82, [1]=0x43, [2]=0x3e, [3]=0x82, [4]=0x93, [5]=0xf6, [6]=0xda, [7]=0x66))) returned 0x0 [0173.785] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0x470d1386, Data2=0x7686, Data3=0x4a80, Data4=([0]=0x9f, [1]=0x2, [2]=0xe2, [3]=0xdd, [4]=0x48, [5]=0x93, [6]=0xac, [7]=0x90))) returned 0x0 [0173.785] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0x28a3e42b, Data2=0xc45d, Data3=0x408b, Data4=([0]=0x9f, [1]=0xaf, [2]=0x28, [3]=0x71, [4]=0x7, [5]=0x49, [6]=0x90, [7]=0xef))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0x31f59711, Data2=0x961, Data3=0x41b9, Data4=([0]=0xa5, [1]=0xa1, [2]=0xd3, [3]=0xa8, [4]=0x80, [5]=0xcf, [6]=0x25, [7]=0x49))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0x6468deae, Data2=0x9985, Data3=0x4765, Data4=([0]=0xbf, [1]=0xd0, [2]=0x9, [3]=0x1c, [4]=0xcc, [5]=0xcc, [6]=0x93, [7]=0x3c))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0xfd14ba8d, Data2=0x32eb, Data3=0x43f0, Data4=([0]=0x99, [1]=0x66, [2]=0xa8, [3]=0xc5, [4]=0x40, [5]=0xd0, [6]=0xd4, [7]=0x78))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0xf0a7cdfc, Data2=0xe945, Data3=0x4d91, Data4=([0]=0xb6, [1]=0x22, [2]=0x75, [3]=0xf1, [4]=0x25, [5]=0xae, [6]=0x30, [7]=0xb1))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0x3d64991a, Data2=0xb9b8, Data3=0x4d45, Data4=([0]=0x97, [1]=0x43, [2]=0x36, [3]=0x4e, [4]=0x88, [5]=0xd, [6]=0xc8, [7]=0xe8))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0xf7aa4d5d, Data2=0x40af, Data3=0x4b2d, Data4=([0]=0x90, [1]=0x9c, [2]=0x61, [3]=0x7, [4]=0x7e, [5]=0x2c, [6]=0x9b, [7]=0xd1))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0x70a9fed2, Data2=0x98d2, Data3=0x4aba, Data4=([0]=0x8f, [1]=0x8e, [2]=0x61, [3]=0x4b, [4]=0x8e, [5]=0x8c, [6]=0x54, [7]=0x7b))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0x317eea1b, Data2=0x439b, Data3=0x4269, Data4=([0]=0x9e, [1]=0xa1, [2]=0x10, [3]=0x27, [4]=0x91, [5]=0x35, [6]=0x22, [7]=0x39))) returned 0x0 [0173.786] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0x7fdf1acb, Data2=0xb26f, Data3=0x4d0f, Data4=([0]=0xb4, [1]=0x83, [2]=0xa9, [3]=0xea, [4]=0x5e, [5]=0x51, [6]=0xa1, [7]=0x94))) returned 0x0 [0173.788] CoCreateGuid (in: pguid=0xebdde8 | out: pguid=0xebdde8*(Data1=0xfe1737c8, Data2=0xb58c, Data3=0x46c0, Data4=([0]=0xa6, [1]=0xc0, [2]=0xd9, [3]=0x9, [4]=0x3, [5]=0xa1, [6]=0x0, [7]=0xe8))) returned 0x0 [0173.788] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0xebdb04, nSize=0xfa | out: lpBuffer="䳆玶✊篠\x14\x01徠玱哨ת") returned 0x0 [0173.978] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe68c | out: phkResult=0xebe68c*=0x634) returned 0x0 [0173.979] RegQueryValueExW (in: hKey=0x634, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe6ac, lpData=0x0, lpcbData=0xebe6a8*=0x0 | out: lpType=0xebe6ac*=0x1, lpData=0x0, lpcbData=0xebe6a8*=0x56) returned 0x0 [0173.979] RegQueryValueExW (in: hKey=0x634, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe6ac, lpData=0x4ef2b34, lpcbData=0xebe6a8*=0x56 | out: lpType=0xebe6ac*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xebe6a8*=0x56) returned 0x0 [0173.979] RegCloseKey (hKey=0x634) returned 0x0 [0173.984] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0xebdcfc, nSize=0xfa | out: lpBuffer="䳆玶│篠\x14\x01徠玱哨ת嬀玺\x01") returned 0x0 [0173.990] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ModuleLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe65c | out: phkResult=0xebe65c*=0x0) returned 0x2 [0173.992] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ModuleLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe65c | out: phkResult=0xebe65c*=0x0) returned 0x2 [0174.572] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x88 [0174.572] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x88, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0174.642] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe604 | out: phkResult=0xebe604*=0x624) returned 0x0 [0174.643] RegQueryValueExW (in: hKey=0x624, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe624, lpData=0x0, lpcbData=0xebe620*=0x0 | out: lpType=0xebe624*=0x1, lpData=0x0, lpcbData=0xebe620*=0x56) returned 0x0 [0174.643] RegQueryValueExW (in: hKey=0x624, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe624, lpData=0x4efafb8, lpcbData=0xebe620*=0x56 | out: lpType=0xebe624*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xebe620*=0x56) returned 0x0 [0174.643] RegCloseKey (hKey=0x624) returned 0x0 [0175.034] CoTaskMemAlloc (cb=0x20c) returned 0x7596ae0 [0175.034] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x7596ae0 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x0 [0175.052] CoTaskMemFree (pv=0x7596ae0) [0175.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1e [0175.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x1e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0175.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0175.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x3b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x3a [0175.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe684) returned 1 [0175.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell"), fInfoLevelId=0x0, lpFileInformation=0xebe700 | out: lpFileInformation=0xebe700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0175.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe680) returned 1 [0175.086] CoCreateGuid (in: pguid=0xebe710 | out: pguid=0xebe710*(Data1=0xea9fab1e, Data2=0x7b49, Data3=0x4b65, Data4=([0]=0xb6, [1]=0x8, [2]=0x2d, [3]=0x5d, [4]=0x1b, [5]=0x1b, [6]=0x30, [7]=0x70))) returned 0x0 [0175.090] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\Transcription", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe5f0 | out: phkResult=0xebe5f0*=0x0) returned 0x2 [0175.092] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\Transcription", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe5f0 | out: phkResult=0xebe5f0*=0x0) returned 0x2 [0175.171] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0xebdc8c, nSize=0xfa | out: lpBuffer="䳆玶⒲篠\x14\x01徠玱哨ת䤀玶⛾篠") returned 0x0 [0175.178] CreateFileW (lpFileName="CONOUT$" (normalized: "\\device\\condrv\\currentout"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x624 [0175.270] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x624, lpConsoleScreenBufferInfo=0xebe69c | out: lpConsoleScreenBufferInfo=0xebe69c) returned 1 [0175.274] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x624, lpConsoleScreenBufferInfo=0xebe69c | out: lpConsoleScreenBufferInfo=0xebe69c) returned 1 [0175.293] GetConsoleMode (in: hConsoleHandle=0x624, lpMode=0xebe700 | out: lpMode=0xebe700) returned 1 [0175.412] SetConsoleMode (hConsoleHandle=0x624, dwMode=0x7) returned 1 [0175.439] GetConsoleMode (in: hConsoleHandle=0x624, lpMode=0xebe700 | out: lpMode=0xebe700) returned 1 [0175.458] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ConsoleSessionConfiguration", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe67c | out: phkResult=0xebe67c*=0x0) returned 0x2 [0175.464] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ConsoleSessionConfiguration", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe67c | out: phkResult=0xebe67c*=0x0) returned 0x2 [0175.465] GetConsoleCP () returned 0x1b5 [0175.468] GetCurrentConsoleFontEx (in: hConsoleOutput=0x624, bMaximumWindow=0, lpConsoleCurrentFontEx=0xebe650 | out: lpConsoleCurrentFontEx=0xebe650) returned 1 [0175.478] SetConsoleCtrlHandler (HandlerRoutine=0x4c72c66, Add=1) returned 1 [0175.479] GetStdHandle (nStdHandle=0xfffffff5) returned 0x90 [0175.479] GetFileType (hFile=0x90) returned 0x2 [0175.480] GetConsoleMode (in: hConsoleHandle=0x90, lpMode=0xebe71c | out: lpMode=0xebe71c) returned 1 [0175.483] GetStdHandle (nStdHandle=0xfffffff6) returned 0x8c [0175.483] GetFileType (hFile=0x8c) returned 0x2 [0175.483] GetConsoleMode (in: hConsoleHandle=0x8c, lpMode=0xebe6f8 | out: lpMode=0xebe6f8) returned 1 [0176.528] CoCreateGuid (in: pguid=0xebe5dc | out: pguid=0xebe5dc*(Data1=0xdb23e4cb, Data2=0xf1ad, Data3=0x4392, Data4=([0]=0xa6, [1]=0xcf, [2]=0x1, [3]=0x25, [4]=0xf9, [5]=0x54, [6]=0xcb, [7]=0xd9))) returned 0x0 [0176.536] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0xebe60c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0xebe60c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x93, [1]=0x50, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0176.968] EtwEventRegister (in: ProviderId=0x4f1b4ec, EnableCallback=0x4c72c8e, CallbackContext=0x0, RegHandle=0x4f1b4c8 | out: RegHandle=0x4f1b4c8) returned 0x0 [0176.969] EtwEventSetInformation (RegHandle=0x7520588, InformationClass=0x4f, EventInformation=0x2, InformationLength=0x4f1b49c) returned 0x0 [0176.974] CoTaskMemAlloc (cb=0x20c) returned 0x7596ae0 [0176.974] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x7596ae0 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0176.974] CoTaskMemFree (pv=0x7596ae0) [0176.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0176.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0176.975] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0xebdb58, nSize=0xfa | out: lpBuffer="䳆玶⟦篠\x14\x01徠玱哨ת?盬ꅢȌ") returned 0x0 [0176.981] GetCurrentProcessId () returned 0x1060 [0176.983] OpenProcess (dwDesiredAccess=0x1000, bInheritHandle=0, dwProcessId=0x1060) returned 0x644 [0176.984] GetProcessTimes (in: hProcess=0x644, lpCreationTime=0x4f1c214, lpExitTime=0x4f1c21c, lpKernelTime=0x4f1c224, lpUserTime=0x4f1c22c | out: lpCreationTime=0x4f1c214, lpExitTime=0x4f1c21c, lpKernelTime=0x4f1c224, lpUserTime=0x4f1c22c) returned 1 [0176.984] CloseHandle (hObject=0x644) returned 1 [0176.986] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0xebd3b4 | out: pTimeZoneInformation=0xebd3b4) returned 0x2 [0176.992] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0xebd498 | out: phkResult=0xebd498*=0x644) returned 0x0 [0176.993] RegQueryValueExW (in: hKey=0x644, lpValueName="TZI", lpReserved=0x0, lpType=0xebd4b4, lpData=0x0, lpcbData=0xebd4b0*=0x0 | out: lpType=0xebd4b4*=0x3, lpData=0x0, lpcbData=0xebd4b0*=0x2c) returned 0x0 [0176.993] RegQueryValueExW (in: hKey=0x644, lpValueName="TZI", lpReserved=0x0, lpType=0xebd4b4, lpData=0x4f1cc30, lpcbData=0xebd4b0*=0x2c | out: lpType=0xebd4b4*=0x3, lpData=0x4f1cc30*, lpcbData=0xebd4b0*=0x2c) returned 0x0 [0176.994] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0xebd2ec | out: phkResult=0xebd2ec*=0x0) returned 0x2 [0176.997] RegQueryValueExW (in: hKey=0x644, lpValueName="MUI_Display", lpReserved=0x0, lpType=0xebd48c, lpData=0x0, lpcbData=0xebd488*=0x0 | out: lpType=0xebd48c*=0x1, lpData=0x0, lpcbData=0xebd488*=0x20) returned 0x0 [0176.997] RegQueryValueExW (in: hKey=0x644, lpValueName="MUI_Display", lpReserved=0x0, lpType=0xebd48c, lpData=0x4f1d084, lpcbData=0xebd488*=0x20 | out: lpType=0xebd48c*=0x1, lpData="@tzres.dll,-320", lpcbData=0xebd488*=0x20) returned 0x0 [0176.997] RegQueryValueExW (in: hKey=0x644, lpValueName="MUI_Std", lpReserved=0x0, lpType=0xebd48c, lpData=0x0, lpcbData=0xebd488*=0x0 | out: lpType=0xebd48c*=0x1, lpData=0x0, lpcbData=0xebd488*=0x20) returned 0x0 [0176.997] RegQueryValueExW (in: hKey=0x644, lpValueName="MUI_Std", lpReserved=0x0, lpType=0xebd48c, lpData=0x4f1d0dc, lpcbData=0xebd488*=0x20 | out: lpType=0xebd48c*=0x1, lpData="@tzres.dll,-322", lpcbData=0xebd488*=0x20) returned 0x0 [0176.997] RegQueryValueExW (in: hKey=0x644, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0xebd48c, lpData=0x0, lpcbData=0xebd488*=0x0 | out: lpType=0xebd48c*=0x1, lpData=0x0, lpcbData=0xebd488*=0x20) returned 0x0 [0176.997] RegQueryValueExW (in: hKey=0x644, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0xebd48c, lpData=0x4f1d134, lpcbData=0xebd488*=0x20 | out: lpType=0xebd48c*=0x1, lpData="@tzres.dll,-321", lpcbData=0xebd488*=0x20) returned 0x0 [0177.000] CoTaskMemAlloc (cb=0x20c) returned 0x7596ae0 [0177.000] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x7596ae0 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0177.000] CoTaskMemFree (pv=0x7596ae0) [0177.000] CoTaskMemAlloc (cb=0x20c) returned 0x7596ae0 [0177.000] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xebd4a8, pwszFileMUIPath=0x7596ae0, pcchFileMUIPath=0xebd4ac, pululEnumerator=0xebd4a0 | out: pwszLanguage=0x0, pcchLanguage=0xebd4a8, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xebd4ac, pululEnumerator=0xebd4a0) returned 1 [0177.001] CoTaskMemFree (pv=0x0) [0177.001] CoTaskMemFree (pv=0x7596ae0) [0177.002] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x4e60001 [0177.003] CoTaskMemAlloc (cb=0x3ec) returned 0x7553af0 [0177.003] LoadStringW (in: hInstance=0x4e60001, uID=0x140, lpBuffer=0x7553af0, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c [0177.004] CoTaskMemFree (pv=0x7553af0) [0177.004] FreeLibrary (hLibModule=0x4e60001) returned 1 [0177.005] CoTaskMemAlloc (cb=0x20c) returned 0x7596ae0 [0177.005] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x7596ae0 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0177.005] CoTaskMemFree (pv=0x7596ae0) [0177.005] CoTaskMemAlloc (cb=0x20c) returned 0x7596ae0 [0177.005] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xebd4a8, pwszFileMUIPath=0x7596ae0, pcchFileMUIPath=0xebd4ac, pululEnumerator=0xebd4a0 | out: pwszLanguage=0x0, pcchLanguage=0xebd4a8, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xebd4ac, pululEnumerator=0xebd4a0) returned 1 [0177.006] CoTaskMemFree (pv=0x0) [0177.006] CoTaskMemFree (pv=0x7596ae0) [0177.006] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x4e60001 [0177.006] CoTaskMemAlloc (cb=0x3ec) returned 0x7553af0 [0177.006] LoadStringW (in: hInstance=0x4e60001, uID=0x142, lpBuffer=0x7553af0, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17 [0177.006] CoTaskMemFree (pv=0x7553af0) [0177.006] FreeLibrary (hLibModule=0x4e60001) returned 1 [0177.007] CoTaskMemAlloc (cb=0x20c) returned 0x7596ae0 [0177.007] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x7596ae0 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0177.124] CoTaskMemFree (pv=0x7596ae0) [0177.124] CoTaskMemAlloc (cb=0x20c) returned 0x7596ae0 [0177.124] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0xebd4a8, pwszFileMUIPath=0x7596ae0, pcchFileMUIPath=0xebd4ac, pululEnumerator=0xebd4a0 | out: pwszLanguage=0x0, pcchLanguage=0xebd4a8, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0xebd4ac, pululEnumerator=0xebd4a0) returned 1 [0177.125] CoTaskMemFree (pv=0x0) [0177.125] CoTaskMemFree (pv=0x7596ae0) [0177.125] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x4e60001 [0177.127] CoTaskMemAlloc (cb=0x3ec) returned 0x7562af0 [0177.127] LoadStringW (in: hInstance=0x4e60001, uID=0x141, lpBuffer=0x7562af0, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17 [0177.127] CoTaskMemFree (pv=0x7562af0) [0177.127] FreeLibrary (hLibModule=0x4e60001) returned 1 [0177.128] RegCloseKey (hKey=0x644) returned 0x0 [0177.134] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x5ec94e8, Length=0x26fd0, ResultLength=0xebd6c8 | out: SystemInformation=0x5ec94e8, ResultLength=0xebd6c8*=0x1a528) returned 0x0 [0177.159] CreateWellKnownSid (in: WellKnownSidType=0x1a, DomainSid=0x0, pSid=0x4f48390, cbSid=0xebd6f8 | out: pSid=0x4f48390*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), cbSid=0xebd6f8) returned 1 [0177.162] GetCurrentProcess () returned 0xffffffff [0177.162] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebd6a4 | out: TokenHandle=0xebd6a4*=0x644) returned 1 [0177.163] GetTokenInformation (in: TokenHandle=0x644, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xebd6a8 | out: TokenInformation=0x0, ReturnLength=0xebd6a8) returned 0 [0177.163] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x110bd00 [0177.163] GetTokenInformation (in: TokenHandle=0x644, TokenInformationClass=0x8, TokenInformation=0x110bd00, TokenInformationLength=0x4, ReturnLength=0xebd6a8 | out: TokenInformation=0x110bd00, ReturnLength=0xebd6a8) returned 1 [0177.163] LocalFree (hMem=0x110bd00) returned 0x0 [0177.163] DuplicateTokenEx (in: hExistingToken=0x644, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0xebd6b0 | out: phNewToken=0xebd6b0*=0x648) returned 1 [0177.163] CheckTokenMembership (in: TokenHandle=0x648, SidToCheck=0x4f488b0*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0xebd6c0 | out: IsMember=0xebd6c0) returned 1 [0177.240] CloseHandle (hObject=0x648) returned 1 [0177.357] CreateNamedPipeW (lpName="\\\\.\\pipe\\PSHost.132324470353031114.4192.DefaultAppDomain.powershell" (normalized: "\\device\\namedpipe\\pshost.132324470353031114.4192.defaultappdomain.powershell"), dwOpenMode=0x40080003, dwPipeMode=0x6, nMaxInstances=0x1, nOutBufferSize=0x8000, nInBufferSize=0x8000, nDefaultTimeOut=0x0, lpSecurityAttributes=0xebd664) returned 0x640 [0177.675] GetFileType (hFile=0x640) returned 0x3 [0177.961] CoTaskMemAlloc (cb=0x20c) returned 0x75e62e0 [0177.961] GetEnvironmentVariableW (in: lpName="PathEXT", lpBuffer=0x75e62e0, nSize=0x104 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0177.961] CoTaskMemFree (pv=0x75e62e0) [0177.967] SetEnvironmentVariableW (lpName="PathEXT", lpValue=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 1 [0181.200] CoCreateGuid (in: pguid=0xebd510 | out: pguid=0xebd510*(Data1=0xc1eddc5b, Data2=0xf835, Data3=0x4f75, Data4=([0]=0x91, [1]=0xc, [2]=0xb5, [3]=0x21, [4]=0xdf, [5]=0xb2, [6]=0x65, [7]=0xd1))) returned 0x0 [0182.613] CoTaskMemAlloc (cb=0x20c) returned 0x109e7a0 [0182.613] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x109e7a0, nSize=0x104 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x5d [0182.613] CoTaskMemFree (pv=0x109e7a0) [0182.614] ExpandEnvironmentStringsW (in: lpSrc="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpDst=0xebe36c, nSize=0x64 | out: lpDst="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x5e [0182.614] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe448 | out: phkResult=0xebe448*=0x66c) returned 0x0 [0182.615] RegQueryValueExW (in: hKey=0x66c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xebe464, lpData=0x0, lpcbData=0xebe460*=0x0 | out: lpType=0xebe464*=0x2, lpData=0x0, lpcbData=0xebe460*=0xbc) returned 0x0 [0182.615] RegQueryValueExW (in: hKey=0x66c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xebe464, lpData=0x4f95334, lpcbData=0xebe460*=0xbc | out: lpType=0xebe464*=0x2, lpData="%ProgramFiles%\\WindowsPowerShell\\Modules;%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules", lpcbData=0xebe460*=0xbc) returned 0x0 [0182.615] ExpandEnvironmentStringsW (in: lpSrc="%ProgramFiles%", lpDst=0xebe2c8, nSize=0x64 | out: lpDst="C:\\Program Files (x86)") returned 0x17 [0182.615] ExpandEnvironmentStringsW (in: lpSrc="%\\WindowsPowerShell\\Modules;%", lpDst=0xebe2c8, nSize=0x64 | out: lpDst="%\\WindowsPowerShell\\Modules;%") returned 0x1e [0182.616] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0xebe2c8, nSize=0x64 | out: lpDst="C:\\WINDOWS") returned 0xb [0182.616] ExpandEnvironmentStringsW (in: lpSrc="%ProgramFiles%\\WindowsPowerShell\\Modules;%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules", lpDst=0xebe2c8, nSize=0x64 | out: lpDst="C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x64 [0182.616] RegCloseKey (hKey=0x66c) returned 0x0 [0182.616] ExpandEnvironmentStringsW (in: lpSrc="C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpDst=0xebe36c, nSize=0x64 | out: lpDst="C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x64 [0182.617] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe448 | out: phkResult=0xebe448*=0x66c) returned 0x0 [0182.617] RegQueryValueExW (in: hKey=0x66c, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0xebe464, lpData=0x0, lpcbData=0xebe460*=0x0 | out: lpType=0xebe464*=0x0, lpData=0x0, lpcbData=0xebe460*=0x0) returned 0x2 [0182.618] RegCloseKey (hKey=0x66c) returned 0x0 [0182.618] CoTaskMemAlloc (cb=0x20c) returned 0x109e7a0 [0182.618] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x109e7a0 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0182.618] CoTaskMemFree (pv=0x109e7a0) [0182.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0182.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0182.621] CoTaskMemAlloc (cb=0x20c) returned 0x109e7a0 [0182.621] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x109e7a0, nSize=0x104 | out: lpBuffer="鯰ݡĊrogram Files (x86)") returned 0x0 [0182.621] CoTaskMemFree (pv=0x109e7a0) [0182.622] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe408 | out: phkResult=0xebe408*=0x66c) returned 0x0 [0182.622] RegQueryValueExW (in: hKey=0x66c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe428, lpData=0x0, lpcbData=0xebe424*=0x0 | out: lpType=0xebe428*=0x1, lpData=0x0, lpcbData=0xebe424*=0x56) returned 0x0 [0182.622] RegQueryValueExW (in: hKey=0x66c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe428, lpData=0x4f96e78, lpcbData=0xebe424*=0x56 | out: lpType=0xebe428*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xebe424*=0x56) returned 0x0 [0182.622] RegCloseKey (hKey=0x66c) returned 0x0 [0182.623] ExpandEnvironmentStringsW (in: lpSrc="c:\\windows\\system32\\windowspowershell\\v1.0\\Modules", lpDst=0xebe350, nSize=0x64 | out: lpDst="c:\\windows\\system32\\windowspowershell\\v1.0\\Modules") returned 0x33 [0182.624] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x772d0000 [0182.626] GetProcAddress (hModule=0x772d0000, lpProcName="IsWow64Process") returned 0x772e5a20 [0182.626] GetCurrentProcess () returned 0xffffffff [0182.626] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0xebe4a4 | out: Wow64Process=0xebe4a4) returned 1 [0182.626] CoTaskMemAlloc (cb=0x20c) returned 0x109e7a0 [0182.626] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x109e7a0 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0182.631] CoTaskMemFree (pv=0x109e7a0) [0182.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0182.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0182.632] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 1 [0182.807] CoTaskMemAlloc (cb=0x20c) returned 0x109e7a0 [0182.808] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x109e7a0, nSize=0x104 | out: lpBuffer="鯰ݡĊsers\\FD1HVy\\Documents") returned 0x0 [0182.808] CoTaskMemFree (pv=0x109e7a0) [0183.639] EtwEventRegister (in: ProviderId=0x4fa1008, EnableCallback=0x4c72d56, CallbackContext=0x0, RegHandle=0x4fa0fe4 | out: RegHandle=0x4fa0fe4) returned 0x0 [0183.640] EtwEventSetInformation (RegHandle=0x7520738, InformationClass=0x54, EventInformation=0x2, InformationLength=0x4fa0f98) returned 0x0 [0183.932] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xebdd38 | out: phkResult=0xebdd38*=0x630) returned 0x0 [0184.066] RegQueryValueExW (in: hKey=0x630, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebdd58, lpData=0x0, lpcbData=0xebdd54*=0x0 | out: lpType=0xebdd58*=0x1, lpData=0x0, lpcbData=0xebdd54*=0x56) returned 0x0 [0184.066] RegQueryValueExW (in: hKey=0x630, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebdd58, lpData=0x4fb5a60, lpcbData=0xebdd54*=0x56 | out: lpType=0xebdd58*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xebdd54*=0x56) returned 0x0 [0184.066] RegCloseKey (hKey=0x630) returned 0x0 [0184.582] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x1a43eab1, Data2=0xca5, Data3=0x49a0, Data4=([0]=0x8d, [1]=0x7e, [2]=0x51, [3]=0x74, [4]=0x66, [5]=0xf4, [6]=0xd6, [7]=0x70))) returned 0x0 [0184.582] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xab1504b5, Data2=0x8d69, Data3=0x42f6, Data4=([0]=0xae, [1]=0x8e, [2]=0xbd, [3]=0x9, [4]=0x32, [5]=0x27, [6]=0x65, [7]=0xc8))) returned 0x0 [0184.583] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x87a3990a, Data2=0x7032, Data3=0x4072, Data4=([0]=0x83, [1]=0x91, [2]=0xf0, [3]=0xb0, [4]=0xe6, [5]=0x1b, [6]=0x7a, [7]=0x7f))) returned 0x0 [0184.583] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x3da69f1, Data2=0x91e1, Data3=0x40b7, Data4=([0]=0xae, [1]=0x8d, [2]=0xfc, [3]=0x13, [4]=0xc9, [5]=0x8b, [6]=0x65, [7]=0x49))) returned 0x0 [0184.583] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x397193, Data2=0xb0f3, Data3=0x439b, Data4=([0]=0xaf, [1]=0x73, [2]=0xfd, [3]=0x15, [4]=0xc5, [5]=0x78, [6]=0xd3, [7]=0x55))) returned 0x0 [0184.583] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xe5edb851, Data2=0x2b72, Data3=0x446c, Data4=([0]=0xaa, [1]=0x72, [2]=0x49, [3]=0x3c, [4]=0x66, [5]=0x90, [6]=0x12, [7]=0x33))) returned 0x0 [0184.583] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xd5d0d583, Data2=0xddb5, Data3=0x4250, Data4=([0]=0x96, [1]=0x2e, [2]=0xc, [3]=0x3f, [4]=0x79, [5]=0x8c, [6]=0x49, [7]=0xe8))) returned 0x0 [0184.583] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x8193936e, Data2=0x76e7, Data3=0x4e7d, Data4=([0]=0x94, [1]=0x43, [2]=0x63, [3]=0x61, [4]=0x6e, [5]=0x2f, [6]=0x79, [7]=0x1))) returned 0x0 [0184.584] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x328419ad, Data2=0x402e, Data3=0x40af, Data4=([0]=0xb2, [1]=0xe6, [2]=0x6c, [3]=0x22, [4]=0x5d, [5]=0x3e, [6]=0x7b, [7]=0x63))) returned 0x0 [0184.584] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x840a0070, Data2=0xd67e, Data3=0x4126, Data4=([0]=0xa7, [1]=0xb8, [2]=0x6, [3]=0xb3, [4]=0xb8, [5]=0xd1, [6]=0x55, [7]=0xf4))) returned 0x0 [0184.584] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x3f5cffe5, Data2=0xe78b, Data3=0x480a, Data4=([0]=0xbe, [1]=0xd8, [2]=0x91, [3]=0x83, [4]=0xba, [5]=0xb1, [6]=0xb6, [7]=0xb4))) returned 0x0 [0184.584] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x6d22dc7d, Data2=0xa9b5, Data3=0x4069, Data4=([0]=0x92, [1]=0x94, [2]=0x93, [3]=0x55, [4]=0xe5, [5]=0x10, [6]=0x21, [7]=0xd6))) returned 0x0 [0184.584] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xc6d53129, Data2=0x97ff, Data3=0x4c01, Data4=([0]=0x8c, [1]=0xa, [2]=0x38, [3]=0x25, [4]=0xd7, [5]=0x54, [6]=0x7b, [7]=0x59))) returned 0x0 [0184.584] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x48a28f0, Data2=0x81bc, Data3=0x4c16, Data4=([0]=0xa1, [1]=0x35, [2]=0xf8, [3]=0xf, [4]=0xd1, [5]=0xc4, [6]=0xcb, [7]=0x94))) returned 0x0 [0184.588] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x99fbdd3a, Data2=0xb70b, Data3=0x40c4, Data4=([0]=0x8a, [1]=0x8, [2]=0x2a, [3]=0x17, [4]=0x36, [5]=0xc2, [6]=0x11, [7]=0x38))) returned 0x0 [0184.588] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x113587ca, Data2=0x92b3, Data3=0x4cf6, Data4=([0]=0xa1, [1]=0x47, [2]=0x43, [3]=0xc5, [4]=0x38, [5]=0x3, [6]=0x1a, [7]=0x32))) returned 0x0 [0184.588] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x2cf4e169, Data2=0x2ed4, Data3=0x4538, Data4=([0]=0x9a, [1]=0x3e, [2]=0x4a, [3]=0xce, [4]=0xe9, [5]=0x71, [6]=0xc7, [7]=0xc0))) returned 0x0 [0184.588] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x4b26d042, Data2=0x5e03, Data3=0x4655, Data4=([0]=0x9d, [1]=0xc8, [2]=0xa, [3]=0xa8, [4]=0xea, [5]=0x7a, [6]=0x77, [7]=0x3f))) returned 0x0 [0184.594] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x7d612243, Data2=0x1d61, Data3=0x4af6, Data4=([0]=0x97, [1]=0x3d, [2]=0xdc, [3]=0x50, [4]=0x78, [5]=0xe9, [6]=0x1d, [7]=0x90))) returned 0x0 [0184.597] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x4d5985a6, Data2=0x10f2, Data3=0x4f2f, Data4=([0]=0xb2, [1]=0x74, [2]=0x48, [3]=0x20, [4]=0x7b, [5]=0xf6, [6]=0xf5, [7]=0x75))) returned 0x0 [0184.597] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x28375820, Data2=0x6163, Data3=0x4248, Data4=([0]=0x9e, [1]=0x82, [2]=0xdf, [3]=0x24, [4]=0x9e, [5]=0xac, [6]=0x9d, [7]=0x57))) returned 0x0 [0184.598] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x86165747, Data2=0x7e76, Data3=0x40f0, Data4=([0]=0x8e, [1]=0xd3, [2]=0xec, [3]=0x11, [4]=0xbb, [5]=0x22, [6]=0x27, [7]=0x43))) returned 0x0 [0184.598] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xafc1286d, Data2=0x9273, Data3=0x4654, Data4=([0]=0xa3, [1]=0x33, [2]=0x2c, [3]=0xb, [4]=0xc7, [5]=0x87, [6]=0xce, [7]=0x4))) returned 0x0 [0184.598] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x4d5ce844, Data2=0x26f2, Data3=0x4846, Data4=([0]=0x99, [1]=0xd6, [2]=0x59, [3]=0xc9, [4]=0x3c, [5]=0xc1, [6]=0x78, [7]=0xd8))) returned 0x0 [0184.598] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x995f8e01, Data2=0xe33, Data3=0x4c9a, Data4=([0]=0x9c, [1]=0xbd, [2]=0x19, [3]=0x57, [4]=0x60, [5]=0x61, [6]=0xb2, [7]=0xc9))) returned 0x0 [0184.598] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x5931588a, Data2=0xe066, Data3=0x405b, Data4=([0]=0xbd, [1]=0x6e, [2]=0x15, [3]=0x67, [4]=0xed, [5]=0x8, [6]=0xeb, [7]=0x3e))) returned 0x0 [0184.598] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xce9b1791, Data2=0xcaa9, Data3=0x4479, Data4=([0]=0x85, [1]=0x5e, [2]=0x51, [3]=0x6e, [4]=0xe7, [5]=0x1b, [6]=0x2b, [7]=0x8a))) returned 0x0 [0184.599] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x9a2c5040, Data2=0x5775, Data3=0x4225, Data4=([0]=0xbb, [1]=0x5c, [2]=0xe8, [3]=0x44, [4]=0x22, [5]=0xa7, [6]=0x77, [7]=0xb8))) returned 0x0 [0184.599] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xcd7da8d8, Data2=0xcad9, Data3=0x4319, Data4=([0]=0xb5, [1]=0x18, [2]=0x1a, [3]=0xe9, [4]=0xab, [5]=0xb5, [6]=0x23, [7]=0x1f))) returned 0x0 [0184.599] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xb17b705c, Data2=0x2d84, Data3=0x466f, Data4=([0]=0xad, [1]=0x8a, [2]=0x59, [3]=0xc0, [4]=0x86, [5]=0x9a, [6]=0x91, [7]=0x2c))) returned 0x0 [0184.599] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x9e228452, Data2=0x66bf, Data3=0x4d8b, Data4=([0]=0xa5, [1]=0x54, [2]=0x49, [3]=0xef, [4]=0xe5, [5]=0x68, [6]=0xc3, [7]=0x38))) returned 0x0 [0184.599] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x230deec9, Data2=0xbddb, Data3=0x45b9, Data4=([0]=0x99, [1]=0x55, [2]=0xe2, [3]=0x18, [4]=0xfc, [5]=0x28, [6]=0x6b, [7]=0xcd))) returned 0x0 [0184.599] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xac5b39ac, Data2=0xbf4c, Data3=0x4e19, Data4=([0]=0xa9, [1]=0x4e, [2]=0x5, [3]=0xd1, [4]=0xdd, [5]=0xd3, [6]=0xfc, [7]=0xac))) returned 0x0 [0184.599] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x5cec2b3c, Data2=0xdaa9, Data3=0x46b1, Data4=([0]=0xae, [1]=0x6d, [2]=0xd6, [3]=0x7c, [4]=0x70, [5]=0xd3, [6]=0x58, [7]=0x26))) returned 0x0 [0184.788] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x8cd1f8df, Data2=0x12de, Data3=0x4f49, Data4=([0]=0x96, [1]=0x1a, [2]=0xec, [3]=0xac, [4]=0xf2, [5]=0x9c, [6]=0x91, [7]=0x91))) returned 0x0 [0184.790] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xea53b7ae, Data2=0x6729, Data3=0x4fd1, Data4=([0]=0xb0, [1]=0xc3, [2]=0x78, [3]=0x25, [4]=0xa6, [5]=0x21, [6]=0x7f, [7]=0x2b))) returned 0x0 [0184.790] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x26abafea, Data2=0x46c, Data3=0x48f0, Data4=([0]=0xa7, [1]=0x9e, [2]=0x42, [3]=0x5, [4]=0xc4, [5]=0xc3, [6]=0x14, [7]=0x5b))) returned 0x0 [0185.954] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x3de625ba, Data2=0xa740, Data3=0x4516, Data4=([0]=0xb9, [1]=0x88, [2]=0x9c, [3]=0x16, [4]=0xab, [5]=0x62, [6]=0x15, [7]=0xe0))) returned 0x0 [0185.954] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xcc214ae7, Data2=0x383b, Data3=0x44b3, Data4=([0]=0xb4, [1]=0x27, [2]=0x8e, [3]=0xaa, [4]=0xe9, [5]=0x2, [6]=0x47, [7]=0x35))) returned 0x0 [0185.955] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x2f5287e1, Data2=0xad92, Data3=0x4153, Data4=([0]=0x94, [1]=0x2f, [2]=0xd3, [3]=0xbe, [4]=0x93, [5]=0x28, [6]=0x3d, [7]=0x5d))) returned 0x0 [0185.955] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xfce337ee, Data2=0xaa77, Data3=0x4516, Data4=([0]=0xaf, [1]=0xb8, [2]=0xf5, [3]=0xbb, [4]=0x12, [5]=0x47, [6]=0x80, [7]=0xfa))) returned 0x0 [0185.956] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x29c640d6, Data2=0x79e, Data3=0x4ee0, Data4=([0]=0x8c, [1]=0x14, [2]=0xb9, [3]=0xd6, [4]=0x3c, [5]=0x22, [6]=0x5b, [7]=0xbd))) returned 0x0 [0185.956] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x54a00545, Data2=0x68b7, Data3=0x4cd1, Data4=([0]=0x95, [1]=0x8, [2]=0xd2, [3]=0x95, [4]=0x43, [5]=0xc5, [6]=0xfe, [7]=0xaf))) returned 0x0 [0185.956] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xd258c14d, Data2=0xb509, Data3=0x47c8, Data4=([0]=0xbb, [1]=0x6, [2]=0x3d, [3]=0xa0, [4]=0x25, [5]=0xc9, [6]=0x4, [7]=0x8a))) returned 0x0 [0185.956] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xf1645b2e, Data2=0xfe67, Data3=0x40f3, Data4=([0]=0xad, [1]=0x6c, [2]=0xd4, [3]=0x35, [4]=0x8f, [5]=0x93, [6]=0xbb, [7]=0x37))) returned 0x0 [0185.956] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xed2f5448, Data2=0x29f5, Data3=0x4714, Data4=([0]=0xbf, [1]=0xb, [2]=0xfb, [3]=0xe9, [4]=0xf1, [5]=0xcb, [6]=0xb8, [7]=0x59))) returned 0x0 [0186.660] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xfca15f92, Data2=0xffa5, Data3=0x470a, Data4=([0]=0x8f, [1]=0x5e, [2]=0x5f, [3]=0x2d, [4]=0x85, [5]=0xd9, [6]=0x19, [7]=0x94))) returned 0x0 [0186.665] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x4127ed4, Data2=0xef5b, Data3=0x40f1, Data4=([0]=0xbd, [1]=0x2f, [2]=0x85, [3]=0x86, [4]=0x6d, [5]=0x40, [6]=0xf4, [7]=0x81))) returned 0x0 [0186.665] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x68f68840, Data2=0x7c9d, Data3=0x430c, Data4=([0]=0xbc, [1]=0xed, [2]=0xab, [3]=0x90, [4]=0x95, [5]=0x9c, [6]=0x64, [7]=0xeb))) returned 0x0 [0186.665] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xa682fb20, Data2=0xa8d7, Data3=0x4858, Data4=([0]=0x9b, [1]=0xc7, [2]=0xcb, [3]=0x5f, [4]=0x4a, [5]=0x6f, [6]=0x23, [7]=0xc2))) returned 0x0 [0186.665] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x400ce0e6, Data2=0x2bdd, Data3=0x4ec9, Data4=([0]=0xae, [1]=0x2c, [2]=0x71, [3]=0xb4, [4]=0xaf, [5]=0x83, [6]=0x2f, [7]=0x1a))) returned 0x0 [0186.665] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xbc07a121, Data2=0x368f, Data3=0x4fb0, Data4=([0]=0x9e, [1]=0x27, [2]=0xd8, [3]=0x3f, [4]=0xa9, [5]=0xe8, [6]=0x23, [7]=0x7))) returned 0x0 [0186.665] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x9881dc9, Data2=0xd0ad, Data3=0x4b99, Data4=([0]=0xa8, [1]=0x62, [2]=0x92, [3]=0x65, [4]=0xa0, [5]=0xf9, [6]=0xf9, [7]=0x9f))) returned 0x0 [0186.666] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x69394dd, Data2=0x44b3, Data3=0x4d1b, Data4=([0]=0xb3, [1]=0xa5, [2]=0x3b, [3]=0xf4, [4]=0x9a, [5]=0x4c, [6]=0xec, [7]=0x16))) returned 0x0 [0186.666] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0x49e2e533, Data2=0x7a2a, Data3=0x474f, Data4=([0]=0xac, [1]=0xd2, [2]=0xc6, [3]=0x15, [4]=0x53, [5]=0xa1, [6]=0x1, [7]=0xca))) returned 0x0 [0186.666] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xc504231d, Data2=0x5c2, Data3=0x4f5b, Data4=([0]=0x8f, [1]=0x20, [2]=0x7a, [3]=0x74, [4]=0x96, [5]=0x32, [6]=0x3b, [7]=0x3b))) returned 0x0 [0186.666] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xafed0c19, Data2=0x401b, Data3=0x4c9c, Data4=([0]=0x90, [1]=0xae, [2]=0x52, [3]=0xca, [4]=0xc4, [5]=0x42, [6]=0x24, [7]=0x85))) returned 0x0 [0186.682] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xf0d0dc07, Data2=0xc202, Data3=0x4a9f, Data4=([0]=0x84, [1]=0xd6, [2]=0x29, [3]=0xe2, [4]=0xc1, [5]=0x30, [6]=0xc, [7]=0x0))) returned 0x0 [0186.685] CoCreateGuid (in: pguid=0xebbbe4 | out: pguid=0xebbbe4*(Data1=0xeff6deb8, Data2=0xcaa, Data3=0x4bef, Data4=([0]=0x8f, [1]=0xa6, [2]=0x5e, [3]=0xcd, [4]=0xc3, [5]=0x97, [6]=0xb1, [7]=0x1b))) returned 0x0 [0188.676] GetLogicalDrives () returned 0x4 [0188.676] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5 [0188.676] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x5, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0188.694] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5 [0188.694] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x5, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0188.694] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.741] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x10c3ff0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0188.750] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0188.750] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1065a50, nSize=0x104 | out: lpBuffer="싨ݒ䤐ݡ寘Ć寰Ć寶Ć寺Ć尔Ć尠Ć") returned 0x0 [0188.750] CoTaskMemFree (pv=0x1065a50) [0188.753] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0188.753] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1065a50, nSize=0x104 | out: lpBuffer="싨ݒ䤐ݡ寘Ć寰Ć寶Ć寺Ć尔Ć尠Ć") returned 0x0 [0188.753] CoTaskMemFree (pv=0x1065a50) [0188.753] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0188.753] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1065a50, nSize=0x104 | out: lpBuffer="싨ݒ䤐ݡ寘Ć寰Ć寶Ć寺Ć尔Ć尠Ć") returned 0x0 [0188.753] CoTaskMemFree (pv=0x1065a50) [0188.769] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0188.770] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1065a50, nSize=0x104 | out: lpBuffer="싨ݒ䤐ݡ寘Ć寰Ć寶Ć寺Ć尔Ć尠Ć") returned 0x0 [0188.770] CoTaskMemFree (pv=0x1065a50) [0188.859] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0188.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18 [0188.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0188.918] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0188.919] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0188.919] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0188.919] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0188.919] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0188.919] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0188.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x10 [0188.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x10, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0188.919] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0188.920] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0188.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18 [0188.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0188.929] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0189.033] ReportEventW (hEventLog=0x7890004, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x514edf0*="Available", lpRawData=0x514ed18) returned 1 [0189.102] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0189.102] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x1065a50, nSize=0x104 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf [0189.102] CoTaskMemFree (pv=0x1065a50) [0189.104] GetCurrentProcessId () returned 0x1060 [0189.106] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe490 | out: phkResult=0xebe490*=0x6a8) returned 0x0 [0189.108] RegQueryValueExW (in: hKey=0x6a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe4b0, lpData=0x0, lpcbData=0xebe4ac*=0x0 | out: lpType=0xebe4b0*=0x1, lpData=0x0, lpcbData=0xebe4ac*=0x56) returned 0x0 [0189.108] RegQueryValueExW (in: hKey=0x6a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe4b0, lpData=0x5155b98, lpcbData=0xebe4ac*=0x56 | out: lpType=0xebe4b0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xebe4ac*=0x56) returned 0x0 [0189.108] RegCloseKey (hKey=0x6a8) returned 0x0 [0189.501] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x10c3ff0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0189.501] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0189.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18 [0189.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0189.523] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0189.523] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0189.523] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0189.524] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0189.524] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0189.524] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0189.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x10 [0189.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x10, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0189.524] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0189.524] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0189.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18 [0189.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0189.526] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0191.814] EtwEventRegister (in: ProviderId=0x5164218, EnableCallback=0x4c72d7e, CallbackContext=0x0, RegHandle=0x51641f4 | out: RegHandle=0x51641f4) returned 0x0 [0191.816] EtwEventSetInformation (RegHandle=0x7520d20, InformationClass=0x55, EventInformation=0x2, InformationLength=0x51641b8) returned 0x0 [0192.672] EnumerateTraceGuidsEx () returned 0x0 [0192.673] GetCurrentProcessId () returned 0x1060 [0193.005] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Winevt\\Publishers\\{816ebd75-f7ab-59c0-e2f0-bddfeed66ac2}", ulOptions=0x0, samDesired=0x20019, phkResult=0xebd55c | out: phkResult=0xebd55c*=0x0) returned 0x2 [0193.672] GetCurrentProcessId () returned 0x1060 [0195.481] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0195.481] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1065a50, nSize=0x104 | out: lpBuffer="싨ݒĉ") returned 0x0 [0195.482] CoTaskMemFree (pv=0x1065a50) [0196.747] EtwEventWriteTransfer (RegHandle=0x1058730, EventDescriptor=0x2e, ActivityId=0xebe670, RelatedActivityId=0xebe610, UserDataCount=0x0, UserData=0x0) returned 0x0 [0196.748] GetCurrentProcessId () returned 0x1060 [0196.748] OpenProcess (dwDesiredAccess=0x1000, bInheritHandle=0, dwProcessId=0x1060) returned 0x6a8 [0196.749] GetProcessTimes (in: hProcess=0x6a8, lpCreationTime=0x5193f78, lpExitTime=0x5193f80, lpKernelTime=0x5193f88, lpUserTime=0x5193f90 | out: lpCreationTime=0x5193f78, lpExitTime=0x5193f80, lpKernelTime=0x5193f88, lpUserTime=0x5193f90) returned 1 [0196.749] CloseHandle (hObject=0x6a8) returned 1 [0196.816] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0196.817] GetSystemDirectoryW (in: lpBuffer=0x1065a50, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0196.817] CoTaskMemFree (pv=0x1065a50) [0196.817] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0196.817] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0196.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe458) returned 1 [0196.818] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0xebe4d4 | out: lpFileInformation=0xebe4d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1c22f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa1c22f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa1c22f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe840)) returned 1 [0196.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe454) returned 1 [0196.902] WldpGetLockdownPolicy () returned 0x10000000 [0196.904] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0196.904] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1065a50 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0196.904] CoTaskMemFree (pv=0x1065a50) [0196.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0196.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x24, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0196.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0196.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x24, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0196.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe44c) returned 1 [0196.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0xebe4c8 | out: lpFileInformation=0xebe4c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5c2cd465, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x5c2cd465, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0196.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe448) returned 1 [0196.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0196.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", lpFilePart=0x0) returned 0x48 [0196.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe394) returned 1 [0196.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_012fz1ir.10r.ps1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0196.918] GetFileType (hFile=0x6b0) returned 0x1 [0196.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe390) returned 1 [0196.918] GetFileType (hFile=0x6b0) returned 0x1 [0196.919] WriteFile (in: hFile=0x6b0, lpBuffer=0x5196a08*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0xebe410, lpOverlapped=0x0 | out: lpBuffer=0x5196a08*, lpNumberOfBytesWritten=0xebe410*=0x1, lpOverlapped=0x0) returned 1 [0196.921] CloseHandle (hObject=0x6b0) returned 1 [0196.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0196.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", lpFilePart=0x0) returned 0x49 [0196.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe394) returned 1 [0196.925] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_ol02zsle.dbs.psm1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0196.925] GetFileType (hFile=0x6b0) returned 0x1 [0196.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe390) returned 1 [0196.925] GetFileType (hFile=0x6b0) returned 0x1 [0196.926] WriteFile (in: hFile=0x6b0, lpBuffer=0x5198f54*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0xebe410, lpOverlapped=0x0 | out: lpBuffer=0x5198f54*, lpNumberOfBytesWritten=0xebe410*=0x1, lpOverlapped=0x0) returned 1 [0196.928] CloseHandle (hObject=0x6b0) returned 1 [0196.931] CoTaskMemAlloc (cb=0x92) returned 0x10b4550 [0196.931] IdentifyCodeAuthzLevelW () returned 0x1 [0197.091] CoTaskMemFree (pv=0x10b4550) [0197.092] ComputeAccessTokenFromCodeAuthzLevel () returned 0x1 [0197.093] CloseCodeAuthzLevel () returned 0x1 [0197.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0197.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", lpFilePart=0x0) returned 0x48 [0197.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe454) returned 1 [0197.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_012fz1ir.10r.ps1"), fInfoLevelId=0x0, lpFileInformation=0xebe4d0 | out: lpFileInformation=0xebe4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ff273c, ftCreationTime.dwHighDateTime=0x1d61c67, ftLastAccessTime.dwLowDateTime=0xb3ff273c, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0xb3ff273c, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0197.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe450) returned 1 [0197.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0197.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1", lpFilePart=0x0) returned 0x48 [0197.094] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_012fz1ir.10r.ps1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_012fz1ir.10r.ps1")) returned 1 [0197.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0197.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", lpFilePart=0x0) returned 0x49 [0197.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe454) returned 1 [0197.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_ol02zsle.dbs.psm1"), fInfoLevelId=0x0, lpFileInformation=0xebe4d0 | out: lpFileInformation=0xebe4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ff273c, ftCreationTime.dwHighDateTime=0x1d61c67, ftLastAccessTime.dwLowDateTime=0xb3ff273c, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0xb401430a, ftLastWriteTime.dwHighDateTime=0x1d61c67, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0197.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe450) returned 1 [0197.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0197.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1", lpFilePart=0x0) returned 0x49 [0197.097] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_ol02zsle.dbs.psm1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_ol02zsle.dbs.psm1")) returned 1 [0197.100] GetSystemInfo (in: lpSystemInfo=0xebe508 | out: lpSystemInfo=0xebe508*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0197.100] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe498 | out: phkResult=0xebe498*=0x6b4) returned 0x0 [0197.102] RegQueryValueExW (in: hKey=0x6b4, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0xebe4b4, lpData=0x0, lpcbData=0xebe4b0*=0x0 | out: lpType=0xebe4b4*=0x0, lpData=0x0, lpcbData=0xebe4b0*=0x0) returned 0x2 [0197.102] RegCloseKey (hKey=0x6b4) returned 0x0 [0197.226] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe4e4 | out: phkResult=0xebe4e4*=0x6b4) returned 0x0 [0197.228] RegQueryValueExW (in: hKey=0x6b4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe504, lpData=0x0, lpcbData=0xebe500*=0x0 | out: lpType=0xebe504*=0x1, lpData=0x0, lpcbData=0xebe500*=0x56) returned 0x0 [0197.228] RegQueryValueExW (in: hKey=0x6b4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe504, lpData=0x519a4fc, lpcbData=0xebe500*=0x56 | out: lpType=0xebe504*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xebe500*=0x56) returned 0x0 [0197.228] RegCloseKey (hKey=0x6b4) returned 0x0 [0197.229] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe4e4 | out: phkResult=0xebe4e4*=0x6b4) returned 0x0 [0197.230] RegQueryValueExW (in: hKey=0x6b4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe504, lpData=0x0, lpcbData=0xebe500*=0x0 | out: lpType=0xebe504*=0x1, lpData=0x0, lpcbData=0xebe500*=0x56) returned 0x0 [0197.230] RegQueryValueExW (in: hKey=0x6b4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0xebe504, lpData=0x519a874, lpcbData=0xebe500*=0x56 | out: lpType=0xebe504*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0xebe500*=0x56) returned 0x0 [0197.230] RegCloseKey (hKey=0x6b4) returned 0x0 [0197.250] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0197.250] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1065a50 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0197.251] CoTaskMemFree (pv=0x1065a50) [0197.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0197.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0197.251] CoTaskMemAlloc (cb=0x20c) returned 0x1065a50 [0197.251] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1065a50 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0197.252] CoTaskMemFree (pv=0x1065a50) [0197.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0197.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0197.257] QueryPerformanceFrequency (in: lpFrequency=0xfe4da0 | out: lpFrequency=0xfe4da0*=100000000) returned 1 [0197.258] QueryPerformanceCounter (in: lpPerformanceCount=0xebe5a4 | out: lpPerformanceCount=0xebe5a4*=29253857530) returned 1 [0197.260] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0197.260] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\profile.ps1", lpFilePart=0x0) returned 0x36 [0197.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe4b4) returned 1 [0197.261] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\profile.ps1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0xebe530 | out: lpFileInformation=0xebe530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0197.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe4b0) returned 1 [0197.261] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0197.261] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x4c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4b [0197.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe4b4) returned 1 [0197.261] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0xebe530 | out: lpFileInformation=0xebe530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0197.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe4b0) returned 1 [0197.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0197.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\profile.ps1", lpFilePart=0x0) returned 0x37 [0197.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe4b4) returned 1 [0197.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\profile.ps1" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0xebe530 | out: lpFileInformation=0xebe530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0197.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe4b0) returned 1 [0197.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0197.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x4d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4c [0197.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebe4b4) returned 1 [0197.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0xebe530 | out: lpFileInformation=0xebe530*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0197.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebe4b0) returned 1 [0197.263] QueryPerformanceCounter (in: lpPerformanceCount=0xebe594 | out: lpPerformanceCount=0xebe594*=29254350455) returned 1 [0197.266] GetCurrentProcessId () returned 0x1060 [0197.266] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x5ec94e8, Length=0x26fd0, ResultLength=0xebe518 | out: SystemInformation=0x5ec94e8, ResultLength=0xebe518*=0x1a228) returned 0x0 [0200.518] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6b4 [0200.519] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x6b0 [0200.519] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6b8 [0200.520] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6bc [0200.520] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6c0 [0200.520] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x6c4 [0200.520] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6c8 [0200.790] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6cc [0200.790] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6d0 [0200.791] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x6d4 [0200.791] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6d8 [0200.791] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6dc [0200.811] SetEvent (hEvent=0x6bc) returned 1 [0200.811] SetEvent (hEvent=0x6b4) returned 1 [0200.811] SetEvent (hEvent=0x6b0) returned 1 [0200.811] SetEvent (hEvent=0x6b8) returned 1 [0200.812] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6e0 [0200.814] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0xebe41c | out: phkResult=0xebe41c*=0x6e4) returned 0x0 [0200.816] RegQueryValueExW (in: hKey=0x6e4, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0xebe43c, lpData=0x0, lpcbData=0xebe438*=0x0 | out: lpType=0xebe43c*=0x0, lpData=0x0, lpcbData=0xebe438*=0x0) returned 0x2 [0200.817] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6e8 [0200.819] SetEvent (hEvent=0x6e8) returned 1 [0239.839] AmsiCloseSession () returned 0x3497830 [0239.840] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x774 [0239.840] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x794 [0239.840] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x798 [0239.840] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x79c [0239.840] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x770 [0239.840] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x7e0 [0239.841] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x7bc [0239.841] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x7c0 [0239.841] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7d0 [0239.841] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x7c4 [0239.841] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x7ec [0239.842] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x7d4 [0239.842] SetEvent (hEvent=0x79c) returned 1 [0239.842] SetEvent (hEvent=0x774) returned 1 [0239.842] SetEvent (hEvent=0x794) returned 1 [0239.842] SetEvent (hEvent=0x798) returned 1 [0239.842] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x7e4 [0239.844] SetEvent (hEvent=0x6e8) returned 1 [0241.313] SetEvent (hEvent=0x770) returned 1 [0241.314] SetEvent (hEvent=0x7e0) returned 1 [0241.314] SetEvent (hEvent=0x7bc) returned 1 [0242.626] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0xebd834, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0242.652] CoTaskMemAlloc (cb=0x20c) returned 0x759d170 [0242.653] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x759d170, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0242.654] CoTaskMemFree (pv=0x759d170) [0242.655] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0242.655] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0242.925] GetCurrentProcess () returned 0xffffffff [0242.925] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebdb9c | out: TokenHandle=0xebdb9c*=0x7d8) returned 1 [0242.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2f [0242.939] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x2f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0243.227] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xebdb94 | out: lpFileInformation=0xebdb94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0243.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0243.241] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0243.245] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0xebdb9c | out: lpFileInformation=0xebdb9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0243.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0243.245] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0243.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0xebdad4) returned 1 [0243.246] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0243.246] GetFileType (hFile=0x7dc) returned 0x1 [0243.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0xebdad0) returned 1 [0243.247] GetFileType (hFile=0x7dc) returned 0x1 [0243.710] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0xebdb90 | out: lpFileSizeHigh=0xebdb90*=0x0) returned 0x8c8f [0243.712] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebdb4c, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebdb4c*=0x1000, lpOverlapped=0x0) returned 1 [0243.845] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd9f8, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd9f8*=0x1000, lpOverlapped=0x0) returned 1 [0243.946] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd8ac, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd8ac*=0x1000, lpOverlapped=0x0) returned 1 [0243.948] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd8ac, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd8ac*=0x1000, lpOverlapped=0x0) returned 1 [0243.948] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd8ac, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd8ac*=0x1000, lpOverlapped=0x0) returned 1 [0243.949] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd7e4, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd7e4*=0x1000, lpOverlapped=0x0) returned 1 [0243.960] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd968, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd968*=0x1000, lpOverlapped=0x0) returned 1 [0243.970] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd874, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd874*=0x1000, lpOverlapped=0x0) returned 1 [0243.970] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd874, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd874*=0xc8f, lpOverlapped=0x0) returned 1 [0243.971] ReadFile (in: hFile=0x7dc, lpBuffer=0x5255c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0xebd938, lpOverlapped=0x0 | out: lpBuffer=0x5255c60*, lpNumberOfBytesRead=0xebd938*=0x0, lpOverlapped=0x0) returned 1 [0243.987] CloseHandle (hObject=0x7dc) returned 1 [0244.096] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0xebd830, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0244.096] CoTaskMemAlloc (cb=0x20c) returned 0x759d170 [0244.097] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x759d170, nSize=0x104 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0244.097] CoTaskMemFree (pv=0x759d170) [0244.097] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0244.098] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0244.101] GetCurrentProcess () returned 0xffffffff [0244.101] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebdce4 | out: TokenHandle=0xebdce4*=0x7dc) returned 1 [0244.109] GetCurrentProcess () returned 0xffffffff [0244.109] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebdce4 | out: TokenHandle=0xebdce4*=0x7f4) returned 1 [0244.127] GetCurrentProcess () returned 0xffffffff [0244.127] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebdb9c | out: TokenHandle=0xebdb9c*=0x7f8) returned 1 [0244.227] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0xebdb94 | out: lpFileInformation=0xebdb94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0244.229] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0244.229] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0244.232] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0xebdb9c | out: lpFileInformation=0xebdb9c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0244.235] GetCurrentProcess () returned 0xffffffff [0244.235] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebdce4 | out: TokenHandle=0xebdce4*=0x7fc) returned 1 [0244.237] GetCurrentProcess () returned 0xffffffff [0244.238] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebdce4 | out: TokenHandle=0xebdce4*=0x7e8) returned 1 [0244.402] GetCurrentProcess () returned 0xffffffff [0244.402] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebdb44 | out: TokenHandle=0xebdb44*=0x804) returned 1 [0244.480] GetCurrentProcess () returned 0xffffffff [0244.480] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0xebdb54 | out: TokenHandle=0xebdb54*=0x808) returned 1 [0244.851] CoCreateGuid (in: pguid=0xebdf00 | out: pguid=0xebdf00*(Data1=0x9b0ed01a, Data2=0xfff4, Data3=0x43e1, Data4=([0]=0x92, [1]=0xa2, [2]=0xe8, [3]=0xe0, [4]=0x6, [5]=0x38, [6]=0x75, [7]=0x16))) returned 0x0 [0244.974] ReportEventW (hEventLog=0x7890004, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x527311c*="Stopped", lpRawData=0x5273044) returned 1 [0244.987] AmsiCloseSession () returned 0x3497830 [0245.037] AmsiUninitialize () returned 0x1 [0245.265] SetEvent (hEvent=0x6e8) returned 1 [0245.630] CloseHandle (hObject=0x6e8) returned 1 [0247.983] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0247.994] CoGetContextToken (in: pToken=0xebf5f8 | out: pToken=0xebf5f8) returned 0x0 [0247.994] CObjectContext::QueryInterface () returned 0x0 [0247.994] CObjectContext::GetCurrentThreadType () returned 0x0 [0247.994] Release () returned 0x0 [0248.099] CoGetContextToken (in: pToken=0xebf2fc | out: pToken=0xebf2fc) returned 0x0 [0248.100] CObjectContext::QueryInterface () returned 0x0 [0248.100] CObjectContext::GetCurrentThreadType () returned 0x0 [0248.100] Release () returned 0x0 [0248.112] CoGetContextToken (in: pToken=0xebf2fc | out: pToken=0xebf2fc) returned 0x0 [0248.112] CObjectContext::QueryInterface () returned 0x0 [0248.113] CObjectContext::GetCurrentThreadType () returned 0x0 [0248.113] Release () returned 0x0 [0248.171] CoGetContextToken (in: pToken=0xebf2fc | out: pToken=0xebf2fc) returned 0x0 [0248.217] CObjectContext::QueryInterface () returned 0x0 [0248.218] CObjectContext::GetCurrentThreadType () returned 0x0 [0248.218] Release () returned 0x0 [0248.222] CoGetContextToken (in: pToken=0xebf31c | out: pToken=0xebf31c) returned 0x0 [0248.222] CObjectContext::QueryInterface () returned 0x0 [0248.223] CObjectContext::GetCurrentThreadType () returned 0x0 [0248.223] Release () returned 0x0 [0248.225] CoUninitialize () Thread: id = 159 os_tid = 0x105c Thread: id = 160 os_tid = 0xf34 Thread: id = 161 os_tid = 0xf64 [0159.254] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0159.254] RoInitialize () returned 0x1 [0159.254] RoUninitialize () returned 0x0 [0186.967] CoGetContextToken (in: pToken=0x4b4fc20 | out: pToken=0x4b4fc20) returned 0x0 [0186.967] CoGetContextToken (in: pToken=0x4b4fba0 | out: pToken=0x4b4fba0) returned 0x0 [0186.967] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x1 [0186.967] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x0 [0186.969] CloseHandle (hObject=0x4a4) returned 1 [0186.971] CertFreeCertificateContext (pCertContext=0x1132980) returned 1 [0186.973] CloseHandle (hObject=0x644) returned 1 [0215.943] RegCloseKey (hKey=0x6e4) returned 0x0 [0225.159] CloseHandle (hObject=0x26c) returned 1 [0225.159] CertFreeCertificateContext (pCertContext=0x1133060) returned 1 [0225.160] CertFreeCertificateContext (pCertContext=0x1132f20) returned 1 [0225.160] CertFreeCertificateContext (pCertContext=0x11331a0) returned 1 [0236.444] CertFreeCertificateContext (pCertContext=0x1133240) returned 1 [0236.446] CloseHandle (hObject=0x770) returned 1 [0236.446] CloseHandle (hObject=0x79c) returned 1 [0236.446] CloseHandle (hObject=0x798) returned 1 [0236.447] CloseHandle (hObject=0x794) returned 1 [0236.448] CloseHandle (hObject=0x774) returned 1 [0248.102] EtwEventUnregister (RegHandle=0x1058580) returned 0x0 [0248.103] EtwEventUnregister (RegHandle=0x1059150) returned 0x0 [0248.103] EtwEventUnregister (RegHandle=0x7520588) returned 0x0 [0248.104] EtwEventUnregister (RegHandle=0x7520660) returned 0x0 [0248.104] EtwEventUnregister (RegHandle=0x7520738) returned 0x0 [0248.105] EtwEventUnregister (RegHandle=0x7520d20) returned 0x0 [0248.105] EtwEventUnregister (RegHandle=0x7521ed8) returned 0x0 [0248.105] EtwEventUnregister (RegHandle=0x79d8a68) returned 0x0 [0248.146] CloseHandle (hObject=0x640) returned 1 [0248.156] CloseHandle (hObject=0x808) returned 1 [0248.157] CloseHandle (hObject=0x804) returned 1 [0248.158] CloseHandle (hObject=0x7e4) returned 1 [0248.159] CloseHandle (hObject=0x7d4) returned 1 [0248.159] CloseHandle (hObject=0x7ec) returned 1 [0248.166] CloseHandle (hObject=0x7c4) returned 1 [0248.167] CloseHandle (hObject=0x7d0) returned 1 [0248.168] CloseHandle (hObject=0x7c0) returned 1 [0248.168] CloseHandle (hObject=0x7bc) returned 1 [0248.169] CloseHandle (hObject=0x7e0) returned 1 [0248.170] CloseHandle (hObject=0x770) returned 1 [0248.173] DeregisterEventSource (hEventLog=0x7890004) returned 1 [0248.180] CloseHandle (hObject=0x79c) returned 1 [0248.180] CloseHandle (hObject=0x798) returned 1 [0248.181] CloseHandle (hObject=0x794) returned 1 [0248.182] CloseHandle (hObject=0x774) returned 1 [0248.183] CloseHandle (hObject=0x6d4) returned 1 [0248.184] CloseHandle (hObject=0x7a8) returned 1 [0248.185] UnmapViewOfFile (lpBaseAddress=0x7430000) returned 1 [0248.188] CloseHandle (hObject=0x6d0) returned 1 [0248.188] CloseHandle (hObject=0x6cc) returned 1 [0248.189] CloseHandle (hObject=0x6e0) returned 1 [0248.190] CloseHandle (hObject=0x6c8) returned 1 [0248.191] CloseHandle (hObject=0x6c4) returned 1 [0248.193] CloseHandle (hObject=0x6c0) returned 1 [0248.194] CloseHandle (hObject=0x6bc) returned 1 [0248.195] CloseHandle (hObject=0x7e8) returned 1 [0248.196] CloseHandle (hObject=0x624) returned 1 [0248.199] CloseHandle (hObject=0x7fc) returned 1 [0248.199] CloseHandle (hObject=0x7a0) returned 1 [0248.200] CloseHandle (hObject=0x7c8) returned 1 [0248.201] CloseHandle (hObject=0x7f8) returned 1 [0248.201] CloseHandle (hObject=0x7b0) returned 1 [0248.202] CloseHandle (hObject=0x7f4) returned 1 [0248.203] CloseHandle (hObject=0x388) returned 1 [0248.204] CloseHandle (hObject=0x618) returned 1 [0248.204] CloseHandle (hObject=0x26c) returned 1 [0248.206] CloseHandle (hObject=0x6b8) returned 1 [0248.208] LocalFree (hMem=0x10c3ff0) returned 0x0 [0248.208] CloseHandle (hObject=0x6b0) returned 1 [0248.209] CloseHandle (hObject=0x6b4) returned 1 [0248.210] CloseHandle (hObject=0x7dc) returned 1 [0248.211] RegCloseKey (hKey=0x80000004) returned 0x0 [0248.214] CloseHandle (hObject=0x6dc) returned 1 [0248.214] CloseHandle (hObject=0x6d8) returned 1 [0248.215] CloseHandle (hObject=0x7d8) returned 1 [0248.220] CoGetContextToken (in: pToken=0x4b4f870 | out: pToken=0x4b4f870) returned 0x0 [0248.220] CoGetContextToken (in: pToken=0x4b4f7f0 | out: pToken=0x4b4f7f0) returned 0x0 [0248.220] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x2 [0248.220] Release () returned 0x1 [0248.222] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 164 os_tid = 0x1374 Thread: id = 165 os_tid = 0x13a8 Thread: id = 166 os_tid = 0x13b0 Thread: id = 167 os_tid = 0x13ac [0166.249] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0166.252] CoGetContextToken (in: pToken=0x4e2fba4 | out: pToken=0x4e2fba4) returned 0x0 [0166.252] CObjectContext::QueryInterface () returned 0x0 [0166.252] CObjectContext::GetCurrentThreadType () returned 0x0 [0166.252] Release () returned 0x0 [0166.252] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0166.253] CoUninitialize () [0166.253] RoInitialize () returned 0x1 [0166.253] RoUninitialize () returned 0x0 [0169.892] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x4e2e7f8 | out: phkResult=0x4e2e7f8*=0x0) returned 0x2 [0169.893] RegCloseKey (hKey=0x80000002) returned 0x0 [0169.924] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x104, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0170.011] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x88 [0170.011] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x88, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0170.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4e2ef40) returned 1 [0170.012] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.management.automation\\v4.0_3.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x4e2efbc | out: lpFileInformation=0x4e2efbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce8766, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x71ce8766, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x71d0e9d1, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x623400)) returned 1 [0170.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4e2ef3c) returned 1 [0170.014] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x4e2f030 | out: lpdwHandle=0x4e2f030) returned 0x94c [0170.462] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x4eab838 | out: lpData=0x4eab838) returned 1 [0170.473] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x4e2f004, puLen=0x4e2f000 | out: lplpBuffer=0x4e2f004*=0x4eab8d4, puLen=0x4e2f000) returned 1 [0170.473] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eab9b0, puLen=0x4e2ef80) returned 1 [0170.473] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eaba04, puLen=0x4e2ef80) returned 1 [0170.473] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eaba60, puLen=0x4e2ef80) returned 1 [0170.473] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eabaa0, puLen=0x4e2ef80) returned 1 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eabb08, puLen=0x4e2ef80) returned 1 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eabba4, puLen=0x4e2ef80) returned 1 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eabc08, puLen=0x4e2ef80) returned 1 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eabc84, puLen=0x4e2ef80) returned 1 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x4eab92c, puLen=0x4e2ef80) returned 1 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x0, puLen=0x4e2ef80) returned 0 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x0, puLen=0x4e2ef80) returned 0 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x4e2ef84, puLen=0x4e2ef80 | out: lplpBuffer=0x4e2ef84*=0x0, puLen=0x4e2ef80) returned 0 [0170.474] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x4e2ef78, puLen=0x4e2ef74 | out: lplpBuffer=0x4e2ef78*=0x4eab8d4, puLen=0x4e2ef74) returned 1 [0170.474] VerLanguageNameW (in: wLang=0x0, szLang=0x4e2ed08, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0170.539] VerQueryValueW (in: pBlock=0x4eab838, lpSubBlock="\\", lplpBuffer=0x4e2ef88, puLen=0x4e2ef84 | out: lplpBuffer=0x4e2ef88*=0x4eab860, puLen=0x4e2ef84) returned 1 [0170.560] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x4e2efc8 | out: phkResult=0x4e2efc8*=0x388) returned 0x0 [0170.560] RegQueryValueExW (in: hKey=0x388, lpValueName="ServiceStackVersion", lpReserved=0x0, lpType=0x4e2efe8, lpData=0x0, lpcbData=0x4e2efe4*=0x0 | out: lpType=0x4e2efe8*=0x1, lpData=0x0, lpcbData=0x4e2efe4*=0x8) returned 0x0 [0170.561] RegQueryValueExW (in: hKey=0x388, lpValueName="ServiceStackVersion", lpReserved=0x0, lpType=0x4e2efe8, lpData=0x4eaf45c, lpcbData=0x4e2efe4*=0x8 | out: lpType=0x4e2efe8*=0x1, lpData="3.0", lpcbData=0x4e2efe4*=0x8) returned 0x0 [0170.563] RegCloseKey (hKey=0x388) returned 0x0 [0170.564] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x4e2f6e8 | out: phkResult=0x4e2f6e8*=0x388) returned 0x0 [0170.564] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x4e2f708, lpData=0x0, lpcbData=0x4e2f704*=0x0 | out: lpType=0x4e2f708*=0x1, lpData=0x0, lpcbData=0x4e2f704*=0x56) returned 0x0 [0170.564] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x4e2f708, lpData=0x4eaf74c, lpcbData=0x4e2f704*=0x56 | out: lpType=0x4e2f708*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x4e2f704*=0x56) returned 0x0 [0170.565] RegCloseKey (hKey=0x388) returned 0x0 [0170.568] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0170.568] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0170.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4e2f6a4) returned 1 [0170.569] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x4e2f720 | out: lpFileInformation=0x4e2f720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0170.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4e2f6a0) returned 1 [0170.574] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0170.574] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0170.577] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x4e2f6b0 | out: phkResult=0x4e2f6b0*=0x388) returned 0x0 [0170.577] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x4e2f6d0, lpData=0x0, lpcbData=0x4e2f6cc*=0x0 | out: lpType=0x4e2f6d0*=0x1, lpData=0x0, lpcbData=0x4e2f6cc*=0x56) returned 0x0 [0170.577] RegQueryValueExW (in: hKey=0x388, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x4e2f6d0, lpData=0x4eafe20, lpcbData=0x4e2f6cc*=0x56 | out: lpType=0x4e2f6d0*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x4e2f6cc*=0x56) returned 0x0 [0170.577] RegCloseKey (hKey=0x388) returned 0x0 [0170.753] CoTaskMemAlloc (cb=0x20c) returned 0x10ca568 [0170.753] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x10ca568 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0170.925] CoTaskMemFree (pv=0x10ca568) [0170.925] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0170.926] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0170.926] CoTaskMemAlloc (cb=0x20c) returned 0x10ca568 [0170.926] SHGetFolderPathW (in: hwnd=0x0, csidl=41, hToken=0x0, dwFlags=0x0, pszPath=0x10ca568 | out: pszPath="C:\\WINDOWS\\SysWOW64") returned 0x0 [0170.927] CoTaskMemFree (pv=0x10ca568) [0170.927] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0170.927] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64", nBufferLength=0x14, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64", lpFilePart=0x0) returned 0x13 [0170.927] CoTaskMemAlloc (cb=0x20c) returned 0x10ca568 [0170.927] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x10ca568 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0170.928] CoTaskMemFree (pv=0x10ca568) [0170.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0170.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0170.995] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0170.995] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0170.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4e2f618) returned 1 [0170.996] GetFileAttributesExW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x4e2f694 | out: lpFileInformation=0x4e2f694*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0170.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4e2f614) returned 1 [0170.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0170.997] GetFullPathNameW (in: lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0170.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x4e2f5ec) returned 1 [0170.998] CreateFileW (lpFileName="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x344 [0170.999] GetFileType (hFile=0x344) returned 0x1 [0170.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x4e2f5e8) returned 1 [0170.999] GetFileType (hFile=0x344) returned 0x1 [0171.165] WTGetSignatureInfo () returned 0x0 [0174.218] CertDuplicateCertificateContext (pCertContext=0x1132980) returned 0x1132980 [0174.492] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x4e2f650 | out: phkResult=0x4e2f650*=0x62c) returned 0x0 [0174.629] RegQueryValueExW (in: hKey=0x62c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x4e2f670, lpData=0x0, lpcbData=0x4e2f66c*=0x0 | out: lpType=0x4e2f670*=0x1, lpData=0x0, lpcbData=0x4e2f66c*=0x56) returned 0x0 [0174.629] RegQueryValueExW (in: hKey=0x62c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x4e2f670, lpData=0x4ef924c, lpcbData=0x4e2f66c*=0x56 | out: lpType=0x4e2f670*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x4e2f66c*=0x56) returned 0x0 [0174.629] RegCloseKey (hKey=0x62c) returned 0x0 [0174.630] CoTaskMemAlloc (cb=0x10) returned 0x10ccc60 [0174.631] CoTaskMemAlloc (cb=0x30) returned 0x752a5d0 [0174.631] WinVerifyTrust () returned 0x0 [0174.647] CoTaskMemFree (pv=0x752a5d0) [0174.647] CoTaskMemFree (pv=0x10ccc60) [0174.648] CertFreeCertificateContext (pCertContext=0x1132980) returned 1 [0174.649] CloseHandle (hObject=0x344) returned 1 [0174.681] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.744] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.836] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.960] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.002] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.041] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.060] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.065] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.105] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.106] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.108] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.109] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.110] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.111] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.112] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.113] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.115] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.116] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.116] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.117] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.121] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.122] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.122] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.123] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.123] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.302] GetCurrentProcess () returned 0xffffffff [0175.302] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x4e2f6e0 | out: TokenHandle=0x4e2f6e0*=0x4a4) returned 1 [0175.308] GetTokenInformation (in: TokenHandle=0x4a4, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x4e2f6e4 | out: TokenInformation=0x0, ReturnLength=0x4e2f6e4) returned 0 [0175.309] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x110bbf0 [0175.309] GetTokenInformation (in: TokenHandle=0x4a4, TokenInformationClass=0x8, TokenInformation=0x110bbf0, TokenInformationLength=0x4, ReturnLength=0x4e2f6e4 | out: TokenInformation=0x110bbf0, ReturnLength=0x4e2f6e4) returned 1 [0175.310] LocalFree (hMem=0x110bbf0) returned 0x0 [0175.312] DuplicateTokenEx (in: hExistingToken=0x4a4, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x4e2f6ec | out: phNewToken=0x4e2f6ec*=0x644) returned 1 [0175.313] CheckTokenMembership (in: TokenHandle=0x644, SidToCheck=0x4f0b2ec*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x4e2f6fc | out: IsMember=0x4e2f6fc) returned 1 [0175.313] CloseHandle (hObject=0x644) returned 1 [0176.526] CoTaskMemAlloc (cb=0x804) returned 0x7562af0 [0176.526] GetConsoleTitleW (in: lpConsoleTitle=0x7562af0, nSize=0x400 | out: lpConsoleTitle="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe") returned 0x23 [0176.540] CoTaskMemFree (pv=0x7562af0) [0176.839] CoTaskMemAlloc (cb=0x804) returned 0x7562af0 [0176.839] GetConsoleTitleW (in: lpConsoleTitle=0x7562af0, nSize=0x400 | out: lpConsoleTitle="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe") returned 0x23 [0176.842] CoTaskMemFree (pv=0x7562af0) [0176.965] SetConsoleTitleW (lpConsoleTitle="Administrator: C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe") returned 1 [0177.214] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.272] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.280] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.310] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.312] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.314] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.316] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.316] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.318] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.319] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.319] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.324] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.326] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.329] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.330] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.331] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.334] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.335] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.336] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.338] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.339] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.360] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.362] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.365] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.368] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.373] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.377] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.379] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.380] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.397] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.399] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.400] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.401] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.404] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.408] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.409] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.411] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.413] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.414] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.415] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.416] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.418] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.420] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.420] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.421] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.422] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.423] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.430] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.431] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.436] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0183.793] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x4e2f52c | out: phkResult=0x4e2f52c*=0x68c) returned 0x0 [0183.797] RegQueryValueExW (in: hKey=0x68c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x4e2f54c, lpData=0x0, lpcbData=0x4e2f548*=0x0 | out: lpType=0x4e2f54c*=0x1, lpData=0x0, lpcbData=0x4e2f548*=0x56) returned 0x0 [0183.797] RegQueryValueExW (in: hKey=0x68c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x4e2f54c, lpData=0x4fb236c, lpcbData=0x4e2f548*=0x56 | out: lpType=0x4e2f54c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x4e2f548*=0x56) returned 0x0 [0183.797] RegCloseKey (hKey=0x68c) returned 0x0 [0184.626] GetTimeZoneInformation (in: lpTimeZoneInformation=0x4e2f2fc | out: lpTimeZoneInformation=0x4e2f2fc) returned 0x2 [0184.631] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x4e2eb70, nSize=0x80 | out: lpBuffer="က澰က澰") returned 0x0 [0184.632] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x3c6d5cb4, Data2=0x6a66, Data3=0x4725, Data4=([0]=0x98, [1]=0x5e, [2]=0xda, [3]=0x9e, [4]=0xf5, [5]=0x6b, [6]=0xf, [7]=0xd8))) returned 0x0 [0184.854] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xf0ae3780, Data2=0xf895, Data3=0x4168, Data4=([0]=0x9f, [1]=0x22, [2]=0x21, [3]=0x65, [4]=0x7a, [5]=0x74, [6]=0x9, [7]=0x73))) returned 0x0 [0185.040] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xbf4c2d6a, Data2=0x8e29, Data3=0x4166, Data4=([0]=0xae, [1]=0x7, [2]=0x9, [3]=0xd4, [4]=0x8c, [5]=0xae, [6]=0x21, [7]=0xb2))) returned 0x0 [0185.043] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8ec128a2, Data2=0x397d, Data3=0x4f12, Data4=([0]=0x87, [1]=0x16, [2]=0x76, [3]=0x3c, [4]=0x28, [5]=0x7a, [6]=0x83, [7]=0x35))) returned 0x0 [0185.050] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb64f20b1, Data2=0xdd5e, Data3=0x4c99, Data4=([0]=0x87, [1]=0x1a, [2]=0x11, [3]=0x64, [4]=0xde, [5]=0xdf, [6]=0xda, [7]=0x29))) returned 0x0 [0185.052] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x5569f78c, Data2=0x4adf, Data3=0x45aa, Data4=([0]=0xbc, [1]=0x7d, [2]=0xcd, [3]=0xb8, [4]=0x78, [5]=0x2d, [6]=0x76, [7]=0x7d))) returned 0x0 [0185.058] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa04d839c, Data2=0x8888, Data3=0x4122, Data4=([0]=0xaa, [1]=0x2e, [2]=0xf4, [3]=0x73, [4]=0xde, [5]=0xb7, [6]=0xd5, [7]=0x2b))) returned 0x0 [0185.070] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x320c964c, Data2=0x5485, Data3=0x4018, Data4=([0]=0x9f, [1]=0x8b, [2]=0xda, [3]=0xfe, [4]=0xa3, [5]=0x9b, [6]=0x87, [7]=0xb4))) returned 0x0 [0185.345] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x5429565d, Data2=0x4414, Data3=0x4fde, Data4=([0]=0xa3, [1]=0xd7, [2]=0xd8, [3]=0x75, [4]=0x16, [5]=0xc3, [6]=0x3c, [7]=0x75))) returned 0x0 [0185.345] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xce426e72, Data2=0x4c8, Data3=0x435d, Data4=([0]=0x8a, [1]=0x83, [2]=0x34, [3]=0xe1, [4]=0xb3, [5]=0xcd, [6]=0xf8, [7]=0x53))) returned 0x0 [0185.353] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x31095cbd, Data2=0xdfeb, Data3=0x4b0d, Data4=([0]=0x8d, [1]=0xf2, [2]=0xd, [3]=0x79, [4]=0xec, [5]=0x56, [6]=0xab, [7]=0x75))) returned 0x0 [0185.358] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x7f2cc38c, Data2=0x3c2d, Data3=0x478f, Data4=([0]=0xb4, [1]=0x77, [2]=0xa9, [3]=0x9e, [4]=0xd6, [5]=0x84, [6]=0xf5, [7]=0x1a))) returned 0x0 [0185.368] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xde0248bf, Data2=0xf27d, Data3=0x42a6, Data4=([0]=0x98, [1]=0xae, [2]=0xc0, [3]=0xd3, [4]=0x76, [5]=0xa5, [6]=0x2f, [7]=0xcd))) returned 0x0 [0185.368] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x43f3813b, Data2=0x10ee, Data3=0x468d, Data4=([0]=0x9f, [1]=0xfb, [2]=0xf9, [3]=0xe0, [4]=0xb7, [5]=0x37, [6]=0x92, [7]=0xd7))) returned 0x0 [0185.376] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x339f77d8, Data2=0x321d, Data3=0x4937, Data4=([0]=0x80, [1]=0x3, [2]=0x3c, [3]=0x3f, [4]=0x5b, [5]=0x53, [6]=0x32, [7]=0xce))) returned 0x0 [0185.377] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa640541f, Data2=0x8023, Data3=0x405a, Data4=([0]=0x87, [1]=0xd7, [2]=0x38, [3]=0xfc, [4]=0xb5, [5]=0x99, [6]=0xd5, [7]=0xbe))) returned 0x0 [0185.386] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x95d17d9e, Data2=0x3f68, Data3=0x43a9, Data4=([0]=0xb1, [1]=0xb7, [2]=0xbb, [3]=0x25, [4]=0x1, [5]=0x5, [6]=0x42, [7]=0x1c))) returned 0x0 [0185.386] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb9be10c, Data2=0x9942, Data3=0x4a94, Data4=([0]=0xa6, [1]=0x3d, [2]=0x60, [3]=0x78, [4]=0x7d, [5]=0x24, [6]=0xff, [7]=0xde))) returned 0x0 [0185.568] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x4d16a9d4, Data2=0x2c0a, Data3=0x47d6, Data4=([0]=0x8f, [1]=0xd1, [2]=0x6c, [3]=0x5f, [4]=0x48, [5]=0x51, [6]=0xd7, [7]=0x2c))) returned 0x0 [0185.573] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x1058ccda, Data2=0xfea7, Data3=0x4e72, Data4=([0]=0xac, [1]=0xb0, [2]=0xfa, [3]=0x98, [4]=0x35, [5]=0x16, [6]=0xc2, [7]=0x4f))) returned 0x0 [0185.583] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe94d004c, Data2=0xe934, Data3=0x4a10, Data4=([0]=0x9e, [1]=0xf5, [2]=0x96, [3]=0x83, [4]=0xd6, [5]=0xde, [6]=0x58, [7]=0x75))) returned 0x0 [0185.583] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x837a00f5, Data2=0x845b, Data3=0x4c32, Data4=([0]=0xa0, [1]=0x4d, [2]=0x88, [3]=0x16, [4]=0xef, [5]=0xe3, [6]=0x8b, [7]=0xe9))) returned 0x0 [0185.590] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x421636d6, Data2=0xe2e0, Data3=0x4b58, Data4=([0]=0xa1, [1]=0xb4, [2]=0xfb, [3]=0x6c, [4]=0xb0, [5]=0xd3, [6]=0xb8, [7]=0x49))) returned 0x0 [0185.596] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x3f8b2238, Data2=0x9826, Data3=0x48c1, Data4=([0]=0xbd, [1]=0x2, [2]=0x42, [3]=0x6a, [4]=0x84, [5]=0x37, [6]=0xe3, [7]=0x6))) returned 0x0 [0185.597] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe6e8c089, Data2=0x81f5, Data3=0x49bd, Data4=([0]=0xaa, [1]=0xf7, [2]=0x10, [3]=0x5c, [4]=0x64, [5]=0x21, [6]=0xb5, [7]=0xf5))) returned 0x0 [0185.597] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa37321f4, Data2=0x4038, Data3=0x46ac, Data4=([0]=0xbe, [1]=0xfa, [2]=0xa, [3]=0x21, [4]=0xf3, [5]=0x78, [6]=0x47, [7]=0x89))) returned 0x0 [0185.597] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xfdd0d1b0, Data2=0x97e4, Data3=0x4619, Data4=([0]=0xa3, [1]=0x22, [2]=0x1f, [3]=0x4a, [4]=0x97, [5]=0x97, [6]=0xdb, [7]=0x3c))) returned 0x0 [0185.603] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xaced0fce, Data2=0x5f3, Data3=0x4661, Data4=([0]=0xae, [1]=0xa6, [2]=0xdf, [3]=0x80, [4]=0x5e, [5]=0xd1, [6]=0x49, [7]=0x76))) returned 0x0 [0185.785] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdec1e5c3, Data2=0x7e45, Data3=0x474a, Data4=([0]=0xb1, [1]=0xd9, [2]=0x49, [3]=0xaa, [4]=0x44, [5]=0x5, [6]=0x65, [7]=0x90))) returned 0x0 [0185.793] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xc6f1281e, Data2=0xc585, Data3=0x4cd0, Data4=([0]=0x8c, [1]=0xcc, [2]=0x8b, [3]=0xee, [4]=0xe5, [5]=0xf7, [6]=0x1, [7]=0x75))) returned 0x0 [0185.793] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xf8469ae9, Data2=0x71e1, Data3=0x45d6, Data4=([0]=0x8c, [1]=0xb5, [2]=0x93, [3]=0xa5, [4]=0xe1, [5]=0x46, [6]=0x87, [7]=0x93))) returned 0x0 [0185.800] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xc661b68, Data2=0xa8ae, Data3=0x4912, Data4=([0]=0xb5, [1]=0xe9, [2]=0xf5, [3]=0x1a, [4]=0x25, [5]=0x1, [6]=0xf5, [7]=0x4f))) returned 0x0 [0185.800] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe50bb700, Data2=0xe30c, Data3=0x4aea, Data4=([0]=0xaf, [1]=0xae, [2]=0xac, [3]=0x28, [4]=0x1e, [5]=0x4f, [6]=0xe0, [7]=0xef))) returned 0x0 [0185.806] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xef434e36, Data2=0x7915, Data3=0x4ba0, Data4=([0]=0x8e, [1]=0x14, [2]=0x11, [3]=0x5f, [4]=0xe5, [5]=0x12, [6]=0x77, [7]=0x60))) returned 0x0 [0185.806] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xef1f0739, Data2=0x8002, Data3=0x4957, Data4=([0]=0x9f, [1]=0x68, [2]=0x62, [3]=0x1c, [4]=0x71, [5]=0xfe, [6]=0xcd, [7]=0xa5))) returned 0x0 [0185.807] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe6b5bfea, Data2=0x2f86, Data3=0x420b, Data4=([0]=0xb1, [1]=0x26, [2]=0xe6, [3]=0x43, [4]=0xd1, [5]=0x2c, [6]=0xfa, [7]=0x50))) returned 0x0 [0185.812] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x93994826, Data2=0x9177, Data3=0x49bf, Data4=([0]=0x9c, [1]=0xbd, [2]=0x66, [3]=0x1d, [4]=0x4, [5]=0xbb, [6]=0x92, [7]=0x8d))) returned 0x0 [0185.820] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x69de9f8f, Data2=0xc889, Data3=0x489c, Data4=([0]=0xb9, [1]=0x45, [2]=0x34, [3]=0xff, [4]=0xd6, [5]=0x51, [6]=0x8c, [7]=0x67))) returned 0x0 [0185.825] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x4d27e093, Data2=0xc5bd, Data3=0x4de9, Data4=([0]=0xb7, [1]=0xb4, [2]=0xe, [3]=0xc5, [4]=0xa3, [5]=0xe7, [6]=0x20, [7]=0xd6))) returned 0x0 [0185.826] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x1f2e28fa, Data2=0x2f73, Data3=0x476e, Data4=([0]=0xb4, [1]=0xa4, [2]=0x89, [3]=0x8a, [4]=0xcc, [5]=0x22, [6]=0xbd, [7]=0xf7))) returned 0x0 [0185.902] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x1db57678, Data2=0x8036, Data3=0x40ed, Data4=([0]=0xae, [1]=0x4, [2]=0x33, [3]=0xc2, [4]=0xb4, [5]=0xdd, [6]=0xcf, [7]=0x66))) returned 0x0 [0185.972] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa7d3d7ab, Data2=0xaecb, Data3=0x4a2f, Data4=([0]=0x81, [1]=0xd8, [2]=0xa6, [3]=0x59, [4]=0xc0, [5]=0xc4, [6]=0x30, [7]=0xa6))) returned 0x0 [0185.978] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x5fb8cf7c, Data2=0xfe6d, Data3=0x4314, Data4=([0]=0xaa, [1]=0x1d, [2]=0x7c, [3]=0x91, [4]=0x7, [5]=0x2c, [6]=0xb5, [7]=0xae))) returned 0x0 [0185.985] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x91730a2e, Data2=0x1214, Data3=0x4bea, Data4=([0]=0x82, [1]=0x46, [2]=0x94, [3]=0xcb, [4]=0xf0, [5]=0x3, [6]=0x4c, [7]=0xb4))) returned 0x0 [0185.990] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8a032ff9, Data2=0xf86, Data3=0x4936, Data4=([0]=0x8c, [1]=0x78, [2]=0xc5, [3]=0x10, [4]=0x5f, [5]=0xa6, [6]=0x21, [7]=0x75))) returned 0x0 [0185.998] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8622d7e5, Data2=0xaba9, Data3=0x4a83, Data4=([0]=0xaa, [1]=0x31, [2]=0x82, [3]=0x2b, [4]=0xfd, [5]=0x47, [6]=0x1e, [7]=0x85))) returned 0x0 [0186.101] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x133010e6, Data2=0x4999, Data3=0x4c5c, Data4=([0]=0xba, [1]=0x40, [2]=0xdd, [3]=0xf7, [4]=0xbf, [5]=0x5d, [6]=0xdb, [7]=0x4))) returned 0x0 [0186.251] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x1fa6493e, Data2=0xfbb3, Data3=0x43bc, Data4=([0]=0x8c, [1]=0x78, [2]=0xe2, [3]=0x77, [4]=0xdd, [5]=0xd0, [6]=0x3a, [7]=0xd))) returned 0x0 [0186.261] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8240c807, Data2=0xbd82, Data3=0x42a3, Data4=([0]=0xab, [1]=0xfd, [2]=0x9e, [3]=0x71, [4]=0x59, [5]=0x5f, [6]=0xc0, [7]=0x6f))) returned 0x0 [0186.272] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa599c3a7, Data2=0x207e, Data3=0x485e, Data4=([0]=0xb5, [1]=0x19, [2]=0xad, [3]=0x7, [4]=0xb, [5]=0xf3, [6]=0x20, [7]=0x59))) returned 0x0 [0186.279] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa9613f0f, Data2=0xd94e, Data3=0x4eba, Data4=([0]=0x99, [1]=0x15, [2]=0xe1, [3]=0x75, [4]=0xf9, [5]=0x18, [6]=0x9c, [7]=0x9))) returned 0x0 [0186.441] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x3869a19a, Data2=0x61ba, Data3=0x4492, Data4=([0]=0xa1, [1]=0x75, [2]=0x4f, [3]=0x59, [4]=0xaf, [5]=0x31, [6]=0x72, [7]=0x3c))) returned 0x0 [0186.448] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe043969f, Data2=0x8050, Data3=0x4c97, Data4=([0]=0x97, [1]=0x8a, [2]=0x14, [3]=0x4a, [4]=0x88, [5]=0xf8, [6]=0x60, [7]=0xd3))) returned 0x0 [0186.456] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x61cc14e7, Data2=0x598c, Data3=0x4e71, Data4=([0]=0x99, [1]=0xed, [2]=0xff, [3]=0x2e, [4]=0xe9, [5]=0xbd, [6]=0x8f, [7]=0x5e))) returned 0x0 [0186.462] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x17823b0, Data2=0xfd8d, Data3=0x4073, Data4=([0]=0x80, [1]=0xa4, [2]=0xc5, [3]=0xfb, [4]=0x94, [5]=0xd6, [6]=0x7, [7]=0xfa))) returned 0x0 [0186.468] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x3cb3a7a2, Data2=0x434f, Data3=0x42db, Data4=([0]=0x9b, [1]=0x95, [2]=0x9a, [3]=0xd7, [4]=0x6b, [5]=0xfb, [6]=0x68, [7]=0x65))) returned 0x0 [0186.476] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa143a651, Data2=0xfa23, Data3=0x4c07, Data4=([0]=0x99, [1]=0xbc, [2]=0xb, [3]=0x3f, [4]=0x89, [5]=0xcd, [6]=0x95, [7]=0xd3))) returned 0x0 [0186.687] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x136d3747, Data2=0x2252, Data3=0x4a0c, Data4=([0]=0x9d, [1]=0x8b, [2]=0x62, [3]=0xee, [4]=0x2b, [5]=0x65, [6]=0xf3, [7]=0xb7))) returned 0x0 [0187.030] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xbb7c355e, Data2=0xe355, Data3=0x47be, Data4=([0]=0x85, [1]=0xaf, [2]=0x20, [3]=0x87, [4]=0x56, [5]=0xaa, [6]=0xb3, [7]=0xbd))) returned 0x0 [0187.042] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb4772479, Data2=0xe2dd, Data3=0x4a10, Data4=([0]=0x86, [1]=0x6b, [2]=0x94, [3]=0xa2, [4]=0xd1, [5]=0x68, [6]=0x26, [7]=0xaa))) returned 0x0 [0187.050] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x1da71ffa, Data2=0x6e4b, Data3=0x4544, Data4=([0]=0x8a, [1]=0x5d, [2]=0x3a, [3]=0x3d, [4]=0xb6, [5]=0xdf, [6]=0xf1, [7]=0xd9))) returned 0x0 [0187.059] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe4a7655f, Data2=0x1d86, Data3=0x4f0c, Data4=([0]=0xbf, [1]=0xd9, [2]=0x40, [3]=0x4b, [4]=0x3f, [5]=0x83, [6]=0x97, [7]=0xe))) returned 0x0 [0187.287] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x4e77f8f, Data2=0x284a, Data3=0x4e4d, Data4=([0]=0x82, [1]=0xf3, [2]=0x33, [3]=0xf4, [4]=0x71, [5]=0x52, [6]=0x8f, [7]=0x50))) returned 0x0 [0187.293] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x50401364, Data2=0x75c8, Data3=0x4143, Data4=([0]=0xa8, [1]=0x8f, [2]=0x15, [3]=0x5e, [4]=0xe2, [5]=0xa1, [6]=0x87, [7]=0x78))) returned 0x0 [0187.302] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x90f8bdae, Data2=0x2af2, Data3=0x4682, Data4=([0]=0x86, [1]=0x8a, [2]=0xf0, [3]=0x9d, [4]=0x37, [5]=0x6b, [6]=0xf7, [7]=0x34))) returned 0x0 [0187.313] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x45c8ba94, Data2=0xec15, Data3=0x4803, Data4=([0]=0xbb, [1]=0x2f, [2]=0x36, [3]=0xa2, [4]=0x6e, [5]=0xff, [6]=0x84, [7]=0x5b))) returned 0x0 [0187.466] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x220e6f6a, Data2=0xc5dc, Data3=0x4647, Data4=([0]=0x97, [1]=0x31, [2]=0xe5, [3]=0xe, [4]=0x55, [5]=0xad, [6]=0x74, [7]=0x94))) returned 0x0 [0187.473] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x1ae9ab89, Data2=0xdf49, Data3=0x405d, Data4=([0]=0x92, [1]=0x83, [2]=0xbc, [3]=0x46, [4]=0xf2, [5]=0x61, [6]=0x68, [7]=0x14))) returned 0x0 [0187.495] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xc2a998b4, Data2=0x2b4f, Data3=0x446b, Data4=([0]=0xb7, [1]=0xc3, [2]=0x20, [3]=0x1e, [4]=0xa3, [5]=0xe5, [6]=0x2e, [7]=0xc))) returned 0x0 [0187.504] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x6bbee6ae, Data2=0xb1c3, Data3=0x4eba, Data4=([0]=0xb7, [1]=0x21, [2]=0xa2, [3]=0x5f, [4]=0x13, [5]=0x74, [6]=0xe, [7]=0xe2))) returned 0x0 [0187.512] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x700fd82a, Data2=0xcf1b, Data3=0x4def, Data4=([0]=0x83, [1]=0x52, [2]=0x3d, [3]=0xfc, [4]=0x59, [5]=0x29, [6]=0xe4, [7]=0x8f))) returned 0x0 [0187.584] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x2071d9a6, Data2=0x32c, Data3=0x41fc, Data4=([0]=0x83, [1]=0x72, [2]=0xe4, [3]=0xc6, [4]=0x8e, [5]=0x84, [6]=0x4d, [7]=0xf9))) returned 0x0 [0187.591] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdc523cc3, Data2=0xc20b, Data3=0x4ec9, Data4=([0]=0xa5, [1]=0xf4, [2]=0x1, [3]=0x48, [4]=0xf2, [5]=0xec, [6]=0x2a, [7]=0x90))) returned 0x0 [0187.601] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xc4346933, Data2=0x2c1e, Data3=0x4028, Data4=([0]=0x84, [1]=0x1a, [2]=0x3c, [3]=0xc9, [4]=0x31, [5]=0x1c, [6]=0xaa, [7]=0xfa))) returned 0x0 [0187.609] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8963077c, Data2=0x508a, Data3=0x4c69, Data4=([0]=0xa4, [1]=0x6e, [2]=0x69, [3]=0xbe, [4]=0x19, [5]=0xf0, [6]=0x16, [7]=0x9b))) returned 0x0 [0187.615] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x542bf197, Data2=0xb8f4, Data3=0x4531, Data4=([0]=0xab, [1]=0x4, [2]=0xab, [3]=0xa4, [4]=0xb8, [5]=0xbf, [6]=0x2a, [7]=0xe5))) returned 0x0 [0187.691] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x5d70f271, Data2=0x36c8, Data3=0x49ec, Data4=([0]=0xba, [1]=0xa2, [2]=0xb2, [3]=0x6e, [4]=0x4d, [5]=0xad, [6]=0xc4, [7]=0x56))) returned 0x0 [0187.699] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xd7ae7500, Data2=0xa927, Data3=0x4172, Data4=([0]=0xbd, [1]=0x66, [2]=0x1e, [3]=0x76, [4]=0x34, [5]=0x6f, [6]=0xc5, [7]=0x9f))) returned 0x0 [0187.707] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdc4942ad, Data2=0x1503, Data3=0x4966, Data4=([0]=0x92, [1]=0xfe, [2]=0xb3, [3]=0x60, [4]=0xf, [5]=0x99, [6]=0x28, [7]=0x1d))) returned 0x0 [0187.713] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa2f49326, Data2=0xcfaa, Data3=0x467b, Data4=([0]=0xb6, [1]=0x78, [2]=0x66, [3]=0x51, [4]=0x7a, [5]=0x87, [6]=0xf3, [7]=0x54))) returned 0x0 [0187.721] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xd1d8b155, Data2=0x4a80, Data3=0x4144, Data4=([0]=0x87, [1]=0xd0, [2]=0x5f, [3]=0xff, [4]=0x4b, [5]=0xc1, [6]=0x4f, [7]=0x8f))) returned 0x0 [0187.730] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb8bd8801, Data2=0xc569, Data3=0x4fbb, Data4=([0]=0xa6, [1]=0x6c, [2]=0xa8, [3]=0xaa, [4]=0x15, [5]=0x9d, [6]=0x62, [7]=0x61))) returned 0x0 [0187.786] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa78e44a0, Data2=0x7cda, Data3=0x473d, Data4=([0]=0x9c, [1]=0xdf, [2]=0xac, [3]=0x95, [4]=0x99, [5]=0x3e, [6]=0x73, [7]=0x7e))) returned 0x0 [0187.796] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x5b215a78, Data2=0x6f5a, Data3=0x4b53, Data4=([0]=0xb8, [1]=0xc5, [2]=0x5f, [3]=0xc0, [4]=0x76, [5]=0x3b, [6]=0xd6, [7]=0xd))) returned 0x0 [0187.805] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x4ccd48aa, Data2=0x175e, Data3=0x4ff3, Data4=([0]=0x92, [1]=0x19, [2]=0x63, [3]=0xa0, [4]=0x71, [5]=0x1f, [6]=0xf6, [7]=0xef))) returned 0x0 [0187.814] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x57be80d2, Data2=0xc73c, Data3=0x499c, Data4=([0]=0x88, [1]=0x8d, [2]=0x4e, [3]=0x96, [4]=0x9b, [5]=0x50, [6]=0x83, [7]=0xf7))) returned 0x0 [0187.872] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x97f57b89, Data2=0xe457, Data3=0x4e5c, Data4=([0]=0xbc, [1]=0xa6, [2]=0x76, [3]=0x9d, [4]=0x8f, [5]=0x1e, [6]=0xa4, [7]=0x56))) returned 0x0 [0187.873] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x9deb5d1c, Data2=0x5519, Data3=0x4403, Data4=([0]=0x94, [1]=0x3e, [2]=0x76, [3]=0x14, [4]=0xfc, [5]=0xf9, [6]=0xed, [7]=0xf9))) returned 0x0 [0187.873] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xcbe9b339, Data2=0xb729, Data3=0x40d3, Data4=([0]=0xb8, [1]=0x80, [2]=0x5f, [3]=0xc, [4]=0x30, [5]=0x42, [6]=0x5c, [7]=0xd2))) returned 0x0 [0187.885] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdc3b4485, Data2=0xa3d6, Data3=0x40ce, Data4=([0]=0x9a, [1]=0x3, [2]=0x0, [3]=0x4e, [4]=0xb6, [5]=0xa9, [6]=0x3f, [7]=0xce))) returned 0x0 [0187.889] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb6d5da42, Data2=0x5526, Data3=0x4037, Data4=([0]=0xb2, [1]=0x63, [2]=0x76, [3]=0xfa, [4]=0xfc, [5]=0x8c, [6]=0x24, [7]=0xeb))) returned 0x0 [0188.304] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x836573d4, Data2=0x1216, Data3=0x467f, Data4=([0]=0xba, [1]=0x69, [2]=0x97, [3]=0x65, [4]=0xac, [5]=0x90, [6]=0xad, [7]=0x8e))) returned 0x0 [0188.362] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8b553655, Data2=0xfc4d, Data3=0x4225, Data4=([0]=0xb5, [1]=0x20, [2]=0x20, [3]=0xb5, [4]=0xc2, [5]=0x9, [6]=0x57, [7]=0x59))) returned 0x0 [0188.372] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x62c0b994, Data2=0x31f7, Data3=0x4be2, Data4=([0]=0x84, [1]=0xea, [2]=0x73, [3]=0xc6, [4]=0x93, [5]=0x80, [6]=0x4, [7]=0x36))) returned 0x0 [0188.378] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe381d7e9, Data2=0xd6a3, Data3=0x4ae9, Data4=([0]=0xbe, [1]=0x8c, [2]=0xb8, [3]=0xc7, [4]=0x15, [5]=0x1, [6]=0x46, [7]=0x7e))) returned 0x0 [0188.382] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x41d876ba, Data2=0xa806, Data3=0x4c3c, Data4=([0]=0x88, [1]=0x6, [2]=0xa2, [3]=0xbe, [4]=0x25, [5]=0x21, [6]=0x7d, [7]=0x5c))) returned 0x0 [0188.391] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb4843da, Data2=0xd9, Data3=0x4819, Data4=([0]=0xbf, [1]=0xd, [2]=0xd2, [3]=0xda, [4]=0xc5, [5]=0xe, [6]=0xcc, [7]=0xe6))) returned 0x0 [0188.399] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x84fc6f4d, Data2=0x17f, Data3=0x4c3b, Data4=([0]=0xa5, [1]=0xd9, [2]=0x8d, [3]=0x58, [4]=0x96, [5]=0x74, [6]=0xf6, [7]=0xec))) returned 0x0 [0188.403] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x2a298c94, Data2=0x4aa2, Data3=0x4535, Data4=([0]=0xb4, [1]=0x5, [2]=0xa5, [3]=0x89, [4]=0xf2, [5]=0x7b, [6]=0x2a, [7]=0x5e))) returned 0x0 [0188.466] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xce57ea61, Data2=0x8fb0, Data3=0x4cd2, Data4=([0]=0x8e, [1]=0xe0, [2]=0x19, [3]=0x8a, [4]=0x9c, [5]=0x4b, [6]=0x1b, [7]=0xcf))) returned 0x0 [0188.468] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xc107440b, Data2=0xfc9c, Data3=0x4220, Data4=([0]=0x98, [1]=0xfc, [2]=0x4e, [3]=0x8, [4]=0xc5, [5]=0x8d, [6]=0xc3, [7]=0x4))) returned 0x0 [0188.470] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x26aa68a8, Data2=0xc4ee, Data3=0x4c74, Data4=([0]=0xbd, [1]=0xbf, [2]=0xae, [3]=0x6f, [4]=0x6f, [5]=0xa8, [6]=0xb5, [7]=0xe1))) returned 0x0 [0188.471] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdba97b29, Data2=0xb81b, Data3=0x4803, Data4=([0]=0x8c, [1]=0x69, [2]=0x16, [3]=0xb1, [4]=0xc0, [5]=0x6b, [6]=0x4f, [7]=0x96))) returned 0x0 [0188.472] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x4f868ec2, Data2=0xe119, Data3=0x4613, Data4=([0]=0x91, [1]=0xd8, [2]=0x46, [3]=0x2a, [4]=0x20, [5]=0x42, [6]=0x8a, [7]=0x7d))) returned 0x0 [0188.474] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb38577f5, Data2=0x96fd, Data3=0x48f3, Data4=([0]=0x9c, [1]=0xa4, [2]=0x35, [3]=0x1, [4]=0xcb, [5]=0x2b, [6]=0xe6, [7]=0xdb))) returned 0x0 [0188.475] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x307b11e3, Data2=0xe823, Data3=0x44c4, Data4=([0]=0x8e, [1]=0x7, [2]=0xa3, [3]=0xa2, [4]=0xf8, [5]=0x1f, [6]=0x38, [7]=0x79))) returned 0x0 [0188.477] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xd9f7cb29, Data2=0xce39, Data3=0x415e, Data4=([0]=0x96, [1]=0xb2, [2]=0xba, [3]=0x60, [4]=0x70, [5]=0x9c, [6]=0xc6, [7]=0xaa))) returned 0x0 [0188.479] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xcc77668e, Data2=0xc122, Data3=0x4e1b, Data4=([0]=0xb4, [1]=0x49, [2]=0x69, [3]=0x5a, [4]=0xfc, [5]=0xe4, [6]=0x8, [7]=0x87))) returned 0x0 [0188.480] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe610f025, Data2=0x2d70, Data3=0x4684, Data4=([0]=0x91, [1]=0x6e, [2]=0xe, [3]=0x34, [4]=0x1d, [5]=0xdc, [6]=0x88, [7]=0xe0))) returned 0x0 [0188.481] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xefb07748, Data2=0x66a8, Data3=0x4801, Data4=([0]=0x94, [1]=0x2c, [2]=0xfa, [3]=0x8e, [4]=0xc8, [5]=0x65, [6]=0x21, [7]=0xb5))) returned 0x0 [0188.482] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x6ed81a3f, Data2=0x6290, Data3=0x4a91, Data4=([0]=0x89, [1]=0x5f, [2]=0xad, [3]=0x7c, [4]=0xa, [5]=0xe2, [6]=0x4f, [7]=0x74))) returned 0x0 [0188.484] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xcd74fbf1, Data2=0x94c5, Data3=0x4cf0, Data4=([0]=0x82, [1]=0x5d, [2]=0x3c, [3]=0x3b, [4]=0x20, [5]=0x9b, [6]=0x9b, [7]=0x1e))) returned 0x0 [0188.486] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x6252ceb6, Data2=0x6f46, Data3=0x408e, Data4=([0]=0xa5, [1]=0x26, [2]=0xc7, [3]=0xb, [4]=0xb, [5]=0x5d, [6]=0xf1, [7]=0x45))) returned 0x0 [0188.488] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xd353f32d, Data2=0x6ce7, Data3=0x4fdf, Data4=([0]=0xb8, [1]=0x96, [2]=0xbf, [3]=0xe5, [4]=0xcc, [5]=0xf5, [6]=0x80, [7]=0xf5))) returned 0x0 [0188.489] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x904f896a, Data2=0xc9a6, Data3=0x4c64, Data4=([0]=0x80, [1]=0xb3, [2]=0xe7, [3]=0xbd, [4]=0x65, [5]=0x32, [6]=0x2e, [7]=0x9a))) returned 0x0 [0188.490] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x151d6240, Data2=0xffa7, Data3=0x4eb5, Data4=([0]=0x99, [1]=0x16, [2]=0x80, [3]=0xd8, [4]=0xf1, [5]=0x92, [6]=0x8d, [7]=0xc7))) returned 0x0 [0188.493] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8e51a21c, Data2=0x1904, Data3=0x4388, Data4=([0]=0xb6, [1]=0x54, [2]=0x69, [3]=0xe8, [4]=0x57, [5]=0x2f, [6]=0xc4, [7]=0x53))) returned 0x0 [0188.496] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x9519aae7, Data2=0x5f3, Data3=0x4cc2, Data4=([0]=0x8a, [1]=0x7c, [2]=0xc2, [3]=0x6e, [4]=0x5b, [5]=0x2f, [6]=0x3f, [7]=0xff))) returned 0x0 [0188.551] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x707e73a9, Data2=0xdcdd, Data3=0x4300, Data4=([0]=0x91, [1]=0x25, [2]=0x7e, [3]=0x4e, [4]=0xba, [5]=0xb5, [6]=0xf, [7]=0x90))) returned 0x0 [0188.555] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x492f72a6, Data2=0xad8, Data3=0x4e90, Data4=([0]=0x9f, [1]=0xe9, [2]=0xf9, [3]=0xb3, [4]=0xda, [5]=0xf5, [6]=0xee, [7]=0x71))) returned 0x0 [0188.556] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x3c1ca0ee, Data2=0xc925, Data3=0x4b6d, Data4=([0]=0xbe, [1]=0xfa, [2]=0xd0, [3]=0x81, [4]=0xd4, [5]=0xdd, [6]=0xd, [7]=0xc4))) returned 0x0 [0188.558] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x70662dc8, Data2=0xdaf0, Data3=0x420d, Data4=([0]=0xa5, [1]=0x88, [2]=0x5d, [3]=0x70, [4]=0x99, [5]=0x75, [6]=0x16, [7]=0x75))) returned 0x0 [0188.559] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdb73828f, Data2=0xbb13, Data3=0x44b0, Data4=([0]=0x84, [1]=0x37, [2]=0x83, [3]=0xc0, [4]=0xbc, [5]=0x55, [6]=0xf4, [7]=0xa3))) returned 0x0 [0188.560] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8314a4fd, Data2=0xcf34, Data3=0x4537, Data4=([0]=0x8b, [1]=0x3e, [2]=0xd8, [3]=0xc9, [4]=0xb3, [5]=0xc7, [6]=0xf0, [7]=0x41))) returned 0x0 [0188.561] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb9784507, Data2=0x3b12, Data3=0x4555, Data4=([0]=0xab, [1]=0xe, [2]=0x84, [3]=0x9f, [4]=0xe4, [5]=0xa7, [6]=0x96, [7]=0x1f))) returned 0x0 [0188.565] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xfb7ec191, Data2=0xc85d, Data3=0x4407, Data4=([0]=0x89, [1]=0x42, [2]=0x7, [3]=0xee, [4]=0x5d, [5]=0x4d, [6]=0x6c, [7]=0xaa))) returned 0x0 [0188.567] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x6c6ef0a, Data2=0x989a, Data3=0x42d8, Data4=([0]=0x9f, [1]=0xe4, [2]=0x6e, [3]=0xfb, [4]=0xf9, [5]=0xd4, [6]=0xa5, [7]=0x12))) returned 0x0 [0188.567] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x78ad1896, Data2=0x609d, Data3=0x4c62, Data4=([0]=0xbc, [1]=0x2c, [2]=0xf0, [3]=0x29, [4]=0xee, [5]=0x3d, [6]=0x4a, [7]=0x24))) returned 0x0 [0188.569] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x62aab9e7, Data2=0xb2ce, Data3=0x493a, Data4=([0]=0x9f, [1]=0x82, [2]=0x9a, [3]=0x69, [4]=0x68, [5]=0xb0, [6]=0x92, [7]=0x31))) returned 0x0 [0188.571] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x2401240c, Data2=0xa4dd, Data3=0x4a04, Data4=([0]=0xa5, [1]=0x54, [2]=0xb0, [3]=0xc7, [4]=0x1d, [5]=0x3e, [6]=0xb4, [7]=0xfa))) returned 0x0 [0188.572] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x4ac13d48, Data2=0x5746, Data3=0x4cb4, Data4=([0]=0x83, [1]=0x24, [2]=0x8f, [3]=0xc7, [4]=0x7, [5]=0x2e, [6]=0x89, [7]=0xde))) returned 0x0 [0188.575] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xd09ab9b0, Data2=0x9000, Data3=0x4447, Data4=([0]=0xb2, [1]=0xe8, [2]=0x16, [3]=0xec, [4]=0x63, [5]=0xb9, [6]=0xa, [7]=0x32))) returned 0x0 [0188.575] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdeceae72, Data2=0x9b93, Data3=0x4091, Data4=([0]=0x8c, [1]=0x33, [2]=0x31, [3]=0xb3, [4]=0xab, [5]=0x56, [6]=0xac, [7]=0x6a))) returned 0x0 [0188.577] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x7083dff4, Data2=0xb53b, Data3=0x496b, Data4=([0]=0x90, [1]=0x1d, [2]=0x0, [3]=0x6a, [4]=0x99, [5]=0xe0, [6]=0xeb, [7]=0x91))) returned 0x0 [0188.577] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xda564248, Data2=0x8935, Data3=0x4dfd, Data4=([0]=0xa5, [1]=0x27, [2]=0x33, [3]=0x2e, [4]=0x71, [5]=0x3, [6]=0x34, [7]=0xc0))) returned 0x0 [0188.578] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x68be8886, Data2=0x745b, Data3=0x4937, Data4=([0]=0x97, [1]=0xfa, [2]=0x13, [3]=0x11, [4]=0x8a, [5]=0x53, [6]=0x5d, [7]=0xbc))) returned 0x0 [0188.579] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xbde9f0d7, Data2=0x30f2, Data3=0x4cbb, Data4=([0]=0x86, [1]=0x27, [2]=0x95, [3]=0x11, [4]=0xd, [5]=0x54, [6]=0xca, [7]=0xf5))) returned 0x0 [0188.580] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x6bad1ed6, Data2=0x367a, Data3=0x410a, Data4=([0]=0xa9, [1]=0x88, [2]=0xd0, [3]=0x39, [4]=0x8f, [5]=0xd4, [6]=0x8d, [7]=0x2b))) returned 0x0 [0188.580] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8b3867c6, Data2=0x1ab1, Data3=0x4d49, Data4=([0]=0xb7, [1]=0x58, [2]=0xa8, [3]=0xc8, [4]=0x1c, [5]=0xea, [6]=0x87, [7]=0x87))) returned 0x0 [0188.580] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x4658651, Data2=0x2704, Data3=0x40fc, Data4=([0]=0x91, [1]=0xae, [2]=0xa9, [3]=0x4d, [4]=0x85, [5]=0x14, [6]=0x6c, [7]=0xec))) returned 0x0 [0188.581] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8d3ffb65, Data2=0x5f1e, Data3=0x499f, Data4=([0]=0xa3, [1]=0x25, [2]=0xab, [3]=0x8, [4]=0xbc, [5]=0x3a, [6]=0xb8, [7]=0x2c))) returned 0x0 [0188.582] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xc6f0a40e, Data2=0x2339, Data3=0x4df6, Data4=([0]=0x83, [1]=0x7f, [2]=0x8f, [3]=0xe5, [4]=0xb8, [5]=0x3d, [6]=0x5f, [7]=0x1b))) returned 0x0 [0188.582] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xb7a1132f, Data2=0xd3f2, Data3=0x447a, Data4=([0]=0xa0, [1]=0x5a, [2]=0x39, [3]=0x8b, [4]=0x69, [5]=0x5a, [6]=0x86, [7]=0x29))) returned 0x0 [0188.583] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x2164753e, Data2=0x8c28, Data3=0x4309, Data4=([0]=0x90, [1]=0x30, [2]=0xa6, [3]=0x4f, [4]=0xe5, [5]=0x52, [6]=0x57, [7]=0x8))) returned 0x0 [0188.583] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xafd37063, Data2=0xc091, Data3=0x44a4, Data4=([0]=0xbb, [1]=0xd1, [2]=0xc7, [3]=0x87, [4]=0xde, [5]=0x0, [6]=0x30, [7]=0x73))) returned 0x0 [0188.585] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdd5488b, Data2=0x4306, Data3=0x4ffe, Data4=([0]=0xa0, [1]=0x5f, [2]=0x23, [3]=0x19, [4]=0xb4, [5]=0x3c, [6]=0x7, [7]=0x7f))) returned 0x0 [0188.585] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xded03318, Data2=0x159c, Data3=0x40a9, Data4=([0]=0x9d, [1]=0xc5, [2]=0xd6, [3]=0xc0, [4]=0xa9, [5]=0xf7, [6]=0xac, [7]=0x7c))) returned 0x0 [0188.585] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x172edc7a, Data2=0xa514, Data3=0x4ebe, Data4=([0]=0xb8, [1]=0xa9, [2]=0xcf, [3]=0x6d, [4]=0x76, [5]=0xa6, [6]=0x32, [7]=0x7a))) returned 0x0 [0188.586] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa39040e8, Data2=0x2de4, Data3=0x408b, Data4=([0]=0x89, [1]=0x8d, [2]=0xef, [3]=0xa, [4]=0xd7, [5]=0xb, [6]=0x8d, [7]=0x9a))) returned 0x0 [0188.586] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xba20ea16, Data2=0x157a, Data3=0x48ba, Data4=([0]=0x8d, [1]=0xa4, [2]=0x69, [3]=0x91, [4]=0x73, [5]=0xa7, [6]=0xd1, [7]=0x43))) returned 0x0 [0188.587] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xd4e5ffd2, Data2=0x5c67, Data3=0x4f57, Data4=([0]=0xb4, [1]=0x34, [2]=0x64, [3]=0x79, [4]=0x21, [5]=0x68, [6]=0x6b, [7]=0x8e))) returned 0x0 [0188.635] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xfd372662, Data2=0xc27f, Data3=0x4fe4, Data4=([0]=0xb0, [1]=0x44, [2]=0x58, [3]=0x7f, [4]=0xd, [5]=0xe3, [6]=0x56, [7]=0xf6))) returned 0x0 [0188.636] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x8293f441, Data2=0xd8d6, Data3=0x4b28, Data4=([0]=0xa6, [1]=0xf3, [2]=0xc3, [3]=0xe1, [4]=0x84, [5]=0xe1, [6]=0x26, [7]=0x7))) returned 0x0 [0188.637] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xcf89a5df, Data2=0xd8c0, Data3=0x43e2, Data4=([0]=0x9f, [1]=0x84, [2]=0xd6, [3]=0x4b, [4]=0xd8, [5]=0xc1, [6]=0x74, [7]=0xd1))) returned 0x0 [0188.637] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xdd9bddd2, Data2=0x85ad, Data3=0x4a96, Data4=([0]=0xa3, [1]=0x8b, [2]=0xa6, [3]=0x33, [4]=0xdc, [5]=0x1b, [6]=0xbc, [7]=0xa1))) returned 0x0 [0188.638] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x84e0f110, Data2=0x43bd, Data3=0x498e, Data4=([0]=0xa5, [1]=0x22, [2]=0xec, [3]=0x71, [4]=0xd6, [5]=0x60, [6]=0xb0, [7]=0x86))) returned 0x0 [0188.638] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa7d38822, Data2=0x8c7a, Data3=0x48d2, Data4=([0]=0xa4, [1]=0x70, [2]=0xb4, [3]=0x74, [4]=0xb2, [5]=0xe4, [6]=0x24, [7]=0x10))) returned 0x0 [0188.639] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x9a47e97d, Data2=0x22e6, Data3=0x4c06, Data4=([0]=0x8b, [1]=0x87, [2]=0xb2, [3]=0xf6, [4]=0xd9, [5]=0xe, [6]=0xcb, [7]=0xf9))) returned 0x0 [0188.641] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x76fe3bb0, Data2=0x2ae9, Data3=0x4716, Data4=([0]=0x97, [1]=0x26, [2]=0xf4, [3]=0x62, [4]=0xaf, [5]=0x2b, [6]=0x60, [7]=0x2d))) returned 0x0 [0188.641] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x204c67d5, Data2=0x57f6, Data3=0x4ee2, Data4=([0]=0x8d, [1]=0x32, [2]=0xda, [3]=0x4d, [4]=0x30, [5]=0xdd, [6]=0x9d, [7]=0xb6))) returned 0x0 [0188.641] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x7d37e638, Data2=0x6914, Data3=0x417d, Data4=([0]=0x83, [1]=0xa5, [2]=0x8b, [3]=0xff, [4]=0x69, [5]=0xd, [6]=0x73, [7]=0x3c))) returned 0x0 [0188.642] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x27c08506, Data2=0x4a83, Data3=0x457f, Data4=([0]=0x9c, [1]=0x27, [2]=0xb7, [3]=0x60, [4]=0x35, [5]=0x21, [6]=0x6d, [7]=0xb0))) returned 0x0 [0188.642] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x5c210d58, Data2=0x4043, Data3=0x427b, Data4=([0]=0x9e, [1]=0xb8, [2]=0xf3, [3]=0x19, [4]=0x5a, [5]=0x1, [6]=0x60, [7]=0x3b))) returned 0x0 [0188.643] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xe9f8aba9, Data2=0x8353, Data3=0x4fe8, Data4=([0]=0x8c, [1]=0x19, [2]=0x22, [3]=0xbc, [4]=0x66, [5]=0x69, [6]=0xd8, [7]=0xcd))) returned 0x0 [0188.644] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x9679c584, Data2=0x29fa, Data3=0x46ea, Data4=([0]=0xb9, [1]=0x7d, [2]=0xf, [3]=0xd7, [4]=0x23, [5]=0x59, [6]=0x35, [7]=0x9f))) returned 0x0 [0188.646] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x745c75b, Data2=0x29c, Data3=0x4401, Data4=([0]=0x83, [1]=0xdc, [2]=0x61, [3]=0x92, [4]=0x4, [5]=0xd2, [6]=0x79, [7]=0x34))) returned 0x0 [0188.647] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xf32eb87a, Data2=0x55aa, Data3=0x4b68, Data4=([0]=0xba, [1]=0xe6, [2]=0x6b, [3]=0xfb, [4]=0x33, [5]=0x30, [6]=0xaa, [7]=0x7b))) returned 0x0 [0188.647] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xd4d90c88, Data2=0xcb03, Data3=0x4abd, Data4=([0]=0xb4, [1]=0x1, [2]=0x97, [3]=0x34, [4]=0x57, [5]=0x9f, [6]=0x18, [7]=0x91))) returned 0x0 [0188.648] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x991c9cfc, Data2=0xcfae, Data3=0x4a0f, Data4=([0]=0xa1, [1]=0x5a, [2]=0xac, [3]=0x89, [4]=0x72, [5]=0xdb, [6]=0xa, [7]=0x4b))) returned 0x0 [0188.648] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x3b7318f4, Data2=0x4304, Data3=0x4846, Data4=([0]=0x95, [1]=0x6a, [2]=0x1a, [3]=0x51, [4]=0x11, [5]=0x81, [6]=0x40, [7]=0x5c))) returned 0x0 [0188.649] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xfc7077bd, Data2=0xf780, Data3=0x4170, Data4=([0]=0xa1, [1]=0xb, [2]=0x5a, [3]=0xd1, [4]=0x10, [5]=0xc, [6]=0x97, [7]=0x7))) returned 0x0 [0188.650] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x46786689, Data2=0x758e, Data3=0x4081, Data4=([0]=0x8e, [1]=0xa7, [2]=0xe7, [3]=0x8b, [4]=0xb5, [5]=0x8, [6]=0xd9, [7]=0xfb))) returned 0x0 [0188.650] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xcf469195, Data2=0x328c, Data3=0x4a28, Data4=([0]=0x8e, [1]=0x60, [2]=0x4e, [3]=0x6c, [4]=0xa9, [5]=0xf9, [6]=0x44, [7]=0x3c))) returned 0x0 [0188.651] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x5310f77d, Data2=0x28e4, Data3=0x4a5c, Data4=([0]=0x81, [1]=0x19, [2]=0xd8, [3]=0x37, [4]=0xe6, [5]=0x93, [6]=0x6b, [7]=0x34))) returned 0x0 [0188.651] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa33dde5f, Data2=0xb17b, Data3=0x4233, Data4=([0]=0xa5, [1]=0xe4, [2]=0x7e, [3]=0x21, [4]=0x84, [5]=0xd, [6]=0x29, [7]=0x1a))) returned 0x0 [0188.652] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa0b8e1c2, Data2=0x8b3, Data3=0x490b, Data4=([0]=0x91, [1]=0xfb, [2]=0x36, [3]=0x24, [4]=0xe7, [5]=0xf, [6]=0x45, [7]=0x38))) returned 0x0 [0188.652] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x63424937, Data2=0x586b, Data3=0x4b72, Data4=([0]=0xa3, [1]=0x0, [2]=0xc9, [3]=0xc9, [4]=0xea, [5]=0x85, [6]=0xd2, [7]=0x44))) returned 0x0 [0188.653] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xeadcaee2, Data2=0xf164, Data3=0x4195, Data4=([0]=0x88, [1]=0x99, [2]=0x91, [3]=0xc1, [4]=0x6c, [5]=0x1c, [6]=0x4a, [7]=0x52))) returned 0x0 [0188.653] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xeaf83ec, Data2=0x97cd, Data3=0x4bb6, Data4=([0]=0x84, [1]=0x75, [2]=0x80, [3]=0xf1, [4]=0xb2, [5]=0xb, [6]=0x9, [7]=0xcb))) returned 0x0 [0188.653] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xc8c16de7, Data2=0xef90, Data3=0x4334, Data4=([0]=0xb8, [1]=0x7b, [2]=0x75, [3]=0xe9, [4]=0xce, [5]=0xe6, [6]=0xbe, [7]=0xc4))) returned 0x0 [0188.654] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x2b3349c8, Data2=0x9f94, Data3=0x4aea, Data4=([0]=0xa1, [1]=0xa9, [2]=0x8, [3]=0x5a, [4]=0x48, [5]=0x15, [6]=0xdb, [7]=0x21))) returned 0x0 [0188.655] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xafae4614, Data2=0x9dd7, Data3=0x4555, Data4=([0]=0xa5, [1]=0x60, [2]=0x13, [3]=0x78, [4]=0xdd, [5]=0xce, [6]=0x58, [7]=0x32))) returned 0x0 [0188.655] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xcba45d05, Data2=0x2d10, Data3=0x404b, Data4=([0]=0x9e, [1]=0xb0, [2]=0x88, [3]=0x29, [4]=0x42, [5]=0x21, [6]=0xfe, [7]=0x29))) returned 0x0 [0188.656] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x74d8ccff, Data2=0xecdc, Data3=0x44a1, Data4=([0]=0xb1, [1]=0x62, [2]=0xe6, [3]=0xbe, [4]=0xe5, [5]=0x23, [6]=0x67, [7]=0xf6))) returned 0x0 [0188.656] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xf1f27483, Data2=0xa210, Data3=0x487e, Data4=([0]=0xac, [1]=0x34, [2]=0x87, [3]=0x8c, [4]=0x4f, [5]=0x8b, [6]=0x0, [7]=0x31))) returned 0x0 [0188.657] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x41da6f78, Data2=0x8e20, Data3=0x43cd, Data4=([0]=0xa9, [1]=0x65, [2]=0x8a, [3]=0x24, [4]=0x2f, [5]=0xfc, [6]=0x25, [7]=0xb6))) returned 0x0 [0188.657] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xc0cacd63, Data2=0xfd67, Data3=0x4da2, Data4=([0]=0xa0, [1]=0x28, [2]=0x9d, [3]=0x75, [4]=0x83, [5]=0xfa, [6]=0x35, [7]=0xb9))) returned 0x0 [0188.657] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x7da1a4c0, Data2=0x932a, Data3=0x46e2, Data4=([0]=0x9b, [1]=0xe0, [2]=0x2, [3]=0xc1, [4]=0xf3, [5]=0xf, [6]=0x8d, [7]=0x73))) returned 0x0 [0188.658] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xa12cf80b, Data2=0xc812, Data3=0x4d41, Data4=([0]=0xbd, [1]=0xe0, [2]=0xa1, [3]=0x17, [4]=0x84, [5]=0x2b, [6]=0x1e, [7]=0xf5))) returned 0x0 [0188.658] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x77cf6024, Data2=0x9bc0, Data3=0x4340, Data4=([0]=0xa3, [1]=0xce, [2]=0x88, [3]=0x99, [4]=0xd5, [5]=0x6f, [6]=0x35, [7]=0x41))) returned 0x0 [0188.659] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xee6cfd1e, Data2=0xdb8a, Data3=0x4061, Data4=([0]=0x9f, [1]=0xcb, [2]=0xbd, [3]=0x56, [4]=0x5e, [5]=0xc9, [6]=0x49, [7]=0x4c))) returned 0x0 [0188.660] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0xaaf082b4, Data2=0x9a7c, Data3=0x49a0, Data4=([0]=0xa7, [1]=0x66, [2]=0x38, [3]=0x1d, [4]=0xed, [5]=0x34, [6]=0xcf, [7]=0xa8))) returned 0x0 [0188.660] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x7416ae7d, Data2=0xe98d, Data3=0x471c, Data4=([0]=0x82, [1]=0x90, [2]=0xf4, [3]=0xda, [4]=0x30, [5]=0x72, [6]=0xb7, [7]=0xd6))) returned 0x0 [0188.660] CoCreateGuid (in: pguid=0x4e2f3c4 | out: pguid=0x4e2f3c4*(Data1=0x2e293902, Data2=0x55a5, Data3=0x4168, Data4=([0]=0x85, [1]=0x37, [2]=0x72, [3]=0xea, [4]=0x48, [5]=0xf5, [6]=0x4, [7]=0x91))) returned 0x0 [0188.662] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.739] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.820] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.907] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.005] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.094] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.469] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.596] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.682] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.075] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.124] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.326] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.480] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.521] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.596] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.637] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.684] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.750] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.796] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.845] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.891] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.933] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.980] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.027] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.075] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.113] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.154] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.353] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.386] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.481] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.531] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.590] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.638] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.683] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.730] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.776] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.841] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.886] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.935] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0191.980] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0192.674] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0192.724] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0192.770] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0192.833] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0192.874] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0192.923] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0192.966] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0193.032] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0193.077] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0193.119] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.753] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.847] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.906] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.975] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.052] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.100] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.178] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.289] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.662] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.756] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.836] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.945] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.130] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.301] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.646] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.818] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.932] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.068] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.364] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.489] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.864] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.990] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0209.100] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0209.286] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0213.223] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0213.316] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0213.405] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.077] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.361] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.442] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.671] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.749] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.825] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.197] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.434] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.551] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.631] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.713] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.799] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.893] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.080] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.176] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.252] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.362] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.577] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.682] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.770] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.853] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.940] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.635] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.760] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.917] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.049] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.149] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.383] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.468] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.580] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.680] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.899] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.000] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.128] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.237] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.518] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.640] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.737] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.831] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.909] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.003] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.129] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.221] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.346] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.713] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.866] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.005] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.146] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.302] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.568] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.672] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.771] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.880] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.979] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.059] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.153] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.294] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.396] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.654] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.758] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.911] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.052] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.130] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.225] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.155] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.501] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.648] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.906] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0241.087] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0241.277] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0241.674] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0241.880] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0242.057] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0242.241] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0242.599] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0242.888] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0243.215] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0243.467] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0243.805] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0243.941] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.082] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.223] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.378] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.818] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.959] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.145] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.332] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.488] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.582] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.981] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0246.161] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0246.316] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0246.473] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0246.618] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0246.914] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0247.066] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0247.232] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0247.384] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0247.543] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0247.660] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0248.035] SleepEx (dwMilliseconds=0x0, bAlertable=0) Thread: id = 168 os_tid = 0x13ec Thread: id = 170 os_tid = 0x137c [0167.562] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0167.563] CoGetContextToken (in: pToken=0x729fa34 | out: pToken=0x729fa34) returned 0x0 [0167.563] CObjectContext::QueryInterface () returned 0x0 [0167.563] CObjectContext::GetCurrentThreadType () returned 0x0 [0167.563] Release () returned 0x0 [0167.563] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0167.563] CoUninitialize () [0167.563] RoInitialize () returned 0x1 [0167.563] RoUninitialize () returned 0x0 [0169.410] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0x729ee5c, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0169.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x729f318) returned 1 [0169.411] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x729f394 | out: lpFileInformation=0x729f394*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0169.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x729f314) returned 1 [0173.338] GetCurrentProcessId () returned 0x1060 [0173.338] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1060) returned 0x5f8 [0173.338] EnumProcessModules (in: hProcess=0x5f8, lphModule=0x4ee787c, cb=0x100, lpcbNeeded=0x729f54c | out: lphModule=0x4ee787c, lpcbNeeded=0x729f54c) returned 1 [0173.338] GetModuleInformation (in: hProcess=0x5f8, hModule=0x1250000, lpmodinfo=0x4ee79bc, cb=0xc | out: lpmodinfo=0x4ee79bc*(lpBaseOfDll=0x1250000, SizeOfImage=0x6c000, EntryPoint=0x12595f0)) returned 1 [0173.339] CoTaskMemAlloc (cb=0x804) returned 0x75e6508 [0173.339] GetModuleBaseNameW (in: hProcess=0x5f8, hModule=0x1250000, lpBaseName=0x75e6508, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0173.339] CoTaskMemFree (pv=0x75e6508) [0173.339] CoTaskMemAlloc (cb=0x804) returned 0x75e6508 [0173.339] GetModuleFileNameExW (in: hProcess=0x5f8, hModule=0x1250000, lpFilename=0x75e6508, nSize=0x800 | out: lpFilename="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0173.339] CoTaskMemFree (pv=0x75e6508) [0173.339] CloseHandle (hObject=0x5f8) returned 1 [0173.340] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x104, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0173.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x729f4cc) returned 1 [0173.340] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe"), fInfoLevelId=0x0, lpFileInformation=0x729f548 | out: lpFileInformation=0x729f548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fdc1d0a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fdc1d0a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fdc1d0a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x69000)) returned 1 [0173.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x729f4c8) returned 1 [0173.340] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", lpdwHandle=0x729f5bc | out: lpdwHandle=0x729f5bc) returned 0x72c [0173.341] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe", dwHandle=0x0, dwLen=0x72c, lpData=0x4ee9bac | out: lpData=0x4ee9bac) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x729f590, puLen=0x729f58c | out: lplpBuffer=0x729f590*=0x4ee9f3c, puLen=0x729f58c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x4ee9c64, puLen=0x729f50c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x4ee9cb8, puLen=0x729f50c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x4ee9d00, puLen=0x729f50c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x4ee9d68, puLen=0x729f50c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x4ee9da4, puLen=0x729f50c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x4ee9e28, puLen=0x729f50c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x4ee9e70, puLen=0x729f50c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x4ee9ee0, puLen=0x729f50c) returned 1 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x0, puLen=0x729f50c) returned 0 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x0, puLen=0x729f50c) returned 0 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x0, puLen=0x729f50c) returned 0 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x729f510, puLen=0x729f50c | out: lplpBuffer=0x729f510*=0x0, puLen=0x729f50c) returned 0 [0173.341] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x729f504, puLen=0x729f500 | out: lplpBuffer=0x729f504*=0x4ee9f3c, puLen=0x729f500) returned 1 [0173.342] VerLanguageNameW (in: wLang=0x409, szLang=0x729f294, cchLang=0x100 | out: szLang="English (United States)") returned 0x17 [0173.342] VerQueryValueW (in: pBlock=0x4ee9bac, lpSubBlock="\\", lplpBuffer=0x729f514, puLen=0x729f510 | out: lplpBuffer=0x729f514*=0x4ee9bd4, puLen=0x729f510) returned 1 [0173.371] AmsiInitialize () returned 0x0 [0177.831] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x729eca0, nSize=0x80 | out: lpBuffer="ဌׯ✇笈玮ܩܩ\x01") returned 0x0 [0178.115] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x729eca0, nSize=0x80 | out: lpBuffer="က煑˳") returned 0x0 [0180.068] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.120] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.133] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.193] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.239] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.251] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.309] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.351] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.356] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.430] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.446] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.451] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.465] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.467] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.472] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.509] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.516] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.555] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.607] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.624] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.627] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.742] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.755] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.833] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.963] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0183.769] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0183.886] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0184.059] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x729f448 | out: phkResult=0x729f448*=0x630) returned 0x0 [0184.064] RegQueryValueExW (in: hKey=0x630, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x729f468, lpData=0x0, lpcbData=0x729f464*=0x0 | out: lpType=0x729f468*=0x1, lpData=0x0, lpcbData=0x729f464*=0x56) returned 0x0 [0184.064] RegQueryValueExW (in: hKey=0x630, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x729f468, lpData=0x4fb5790, lpcbData=0x729f464*=0x56 | out: lpType=0x729f468*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x729f464*=0x56) returned 0x0 [0184.064] RegCloseKey (hKey=0x630) returned 0x0 [0184.215] CoCreateGuid (in: pguid=0x729f3f0 | out: pguid=0x729f3f0*(Data1=0x2476d491, Data2=0xcd82, Data3=0x4f62, Data4=([0]=0xbc, [1]=0x85, [2]=0xf3, [3]=0x74, [4]=0x58, [5]=0x37, [6]=0x89, [7]=0xb3))) returned 0x0 [0184.217] CoCreateGuid (in: pguid=0x729f3f0 | out: pguid=0x729f3f0*(Data1=0x4502da9a, Data2=0xa5c2, Data3=0x4568, Data4=([0]=0xb9, [1]=0xb0, [2]=0xed, [3]=0x40, [4]=0x2c, [5]=0xb, [6]=0x9a, [7]=0x3b))) returned 0x0 [0184.217] CoCreateGuid (in: pguid=0x729f3f0 | out: pguid=0x729f3f0*(Data1=0x23d0d8aa, Data2=0x25a5, Data3=0x44ab, Data4=([0]=0x87, [1]=0x6b, [2]=0x93, [3]=0x6b, [4]=0x95, [5]=0xd9, [6]=0x66, [7]=0xec))) returned 0x0 [0184.217] CoCreateGuid (in: pguid=0x729f3f0 | out: pguid=0x729f3f0*(Data1=0xcb3e40f6, Data2=0x978f, Data3=0x457d, Data4=([0]=0x80, [1]=0x39, [2]=0xb4, [3]=0xce, [4]=0x9, [5]=0x85, [6]=0x33, [7]=0xaa))) returned 0x0 [0184.444] CoCreateGuid (in: pguid=0x729f3f0 | out: pguid=0x729f3f0*(Data1=0x46dfb6ac, Data2=0x4e6c, Data3=0x409e, Data4=([0]=0xa5, [1]=0xf4, [2]=0x3c, [3]=0xf0, [4]=0x9d, [5]=0xd1, [6]=0x8f, [7]=0x9))) returned 0x0 [0184.444] CoCreateGuid (in: pguid=0x729f3f0 | out: pguid=0x729f3f0*(Data1=0xa08af6ae, Data2=0x3ae2, Data3=0x4cdc, Data4=([0]=0x9a, [1]=0x6b, [2]=0x48, [3]=0x5f, [4]=0x9a, [5]=0x8d, [6]=0x5c, [7]=0xb2))) returned 0x0 [0185.714] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0185.877] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0186.046] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0186.333] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0186.610] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0186.737] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0186.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0186.922] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0187.017] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0187.282] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0187.465] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0187.578] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0187.690] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0187.782] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0187.860] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0187.967] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.264] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.359] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.461] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.548] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.631] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.751] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.808] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.902] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.975] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.052] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.100] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.178] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.289] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.662] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.756] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.836] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0213.316] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0213.405] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.077] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.361] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.441] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.671] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.749] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0214.824] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.197] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.433] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.550] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.631] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.713] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.799] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0215.893] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.080] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.175] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.252] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.362] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.577] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.682] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.770] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.852] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0216.940] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.130] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.221] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.335] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.426] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.518] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.617] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.690] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.783] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.877] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0217.970] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.127] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.283] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.377] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.457] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.549] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.627] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.710] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.799] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0218.927] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0219.440] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0219.596] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0219.704] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0219.801] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0219.892] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0219.987] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.129] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.345] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.423] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.520] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.619] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x729f738 | out: UnbiasedTime=0x729f738) returned 1 [0220.646] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.760] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.917] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.050] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.149] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.383] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.468] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.580] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.680] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.899] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.000] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.128] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.237] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.518] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.640] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.738] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.831] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.909] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.002] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.096] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.192] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.435] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.524] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.635] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.737] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.831] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.925] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.002] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.096] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.237] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.501] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.645] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.752] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.910] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.003] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.129] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.221] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.500] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.713] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0225.866] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.005] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.146] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.302] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.568] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.672] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.771] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.880] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0226.979] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.059] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.153] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.294] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.396] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.655] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.758] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0227.912] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.053] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.130] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.225] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.318] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.458] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.552] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.646] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0228.958] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0229.068] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0229.193] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0229.302] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0229.458] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0229.646] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0229.944] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0230.037] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0230.161] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0230.255] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0230.366] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0230.458] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0230.552] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0230.636] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.041] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.181] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.277] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.478] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.572] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.713] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.116] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.210] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.312] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.452] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.593] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.734] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.015] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.171] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.312] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.454] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.616] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.720] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.119] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.256] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.458] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.601] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.707] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.004] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.195] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.314] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.461] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 Thread: id = 177 os_tid = 0x13e0 [0170.057] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0170.057] CoGetContextToken (in: pToken=0x731f924 | out: pToken=0x731f924) returned 0x0 [0170.057] CObjectContext::QueryInterface () returned 0x0 [0170.058] CObjectContext::GetCurrentThreadType () returned 0x0 [0170.058] Release () returned 0x0 [0170.058] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0170.058] CoUninitialize () [0170.058] RoInitialize () returned 0x1 [0170.058] RoUninitialize () returned 0x0 [0170.101] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0170.177] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0170.428] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0170.678] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0170.897] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0171.085] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0171.335] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0171.444] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0171.734] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0171.913] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0172.070] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0172.288] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0172.501] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.077] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.226] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.333] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.415] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.448] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.451] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.473] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.479] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.481] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.519] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.523] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.527] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.538] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.565] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.716] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.793] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0173.977] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.074] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.222] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.391] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.435] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.437] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.437] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.438] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.440] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.441] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.443] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.444] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.444] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.446] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.447] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.449] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.449] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.450] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.450] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.451] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.453] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.688] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.751] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0174.984] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.040] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.059] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.064] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.104] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.105] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.106] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.108] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.109] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.111] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.111] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.112] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.113] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.115] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.116] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.116] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.117] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.121] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.122] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.123] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.123] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.123] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.124] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.124] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.125] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.125] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.126] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.127] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.132] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.134] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.135] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.136] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.137] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.137] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.137] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.137] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.139] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.144] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.179] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.183] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.185] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.190] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.191] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.192] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.193] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.193] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.194] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.336] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.411] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.414] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.439] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.442] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.443] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.466] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.467] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.470] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.471] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.481] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.482] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.484] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.484] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.491] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.492] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.493] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.493] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.494] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.496] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.499] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.500] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.500] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.501] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.503] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.505] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.514] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.515] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.516] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.516] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.518] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.519] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.519] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.520] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.521] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.521] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.522] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.524] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.525] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.525] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.525] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.526] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.526] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.527] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.527] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.529] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.529] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.530] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0175.530] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.213] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.271] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.280] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.310] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.312] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.314] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.316] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.316] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.317] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.319] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.319] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.324] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.326] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.328] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.330] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.331] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.333] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.335] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.335] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.338] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.339] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.360] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.362] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.365] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0177.368] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.068] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.127] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.149] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.193] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.240] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.261] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.310] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.351] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.356] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.430] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.447] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.451] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.465] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.467] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.472] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.510] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.516] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.555] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.608] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.624] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.627] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.742] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.755] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.833] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0180.964] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.028] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.185] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.247] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.330] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.375] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.473] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.549] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.643] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.749] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.841] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.919] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0181.983] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.028] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.217] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.262] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.308] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.355] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.420] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.465] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.514] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.560] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.634] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.684] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.748] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0182.839] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0183.490] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x731eae0, nSize=0x80 | out: lpBuffer="က澰က澰") returned 0x0 [0185.495] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x731e9ac, nSize=0x80 | out: lpBuffer="ܱ籶玲Ꮾ簺က澰က澰") returned 0x0 [0185.728] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x630) returned 0x0 [0185.730] RegQueryInfoKeyW (in: hKey=0x630, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x731f2fc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x731f2f8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x731f2fc*=0x8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x731f2f8*=0x13, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.730] RegEnumKeyExW (in: hKey=0x630, dwIndex=0x0, lpName=0x50298b8, lpcchName=0x731f318, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x731f318, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.730] RegEnumKeyExW (in: hKey=0x630, dwIndex=0x1, lpName=0x50298b8, lpcchName=0x731f318, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x731f318, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.730] RegEnumKeyExW (in: hKey=0x630, dwIndex=0x2, lpName=0x50298b8, lpcchName=0x731f318, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x731f318, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.730] RegEnumKeyExW (in: hKey=0x630, dwIndex=0x3, lpName=0x50298b8, lpcchName=0x731f318, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x731f318, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.730] RegEnumKeyExW (in: hKey=0x630, dwIndex=0x4, lpName=0x50298b8, lpcchName=0x731f318, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x731f318, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.730] RegEnumKeyExW (in: hKey=0x630, dwIndex=0x5, lpName=0x50298b8, lpcchName=0x731f318, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x731f318, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.731] RegEnumKeyExW (in: hKey=0x630, dwIndex=0x6, lpName=0x50298b8, lpcchName=0x731f318, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x731f318, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.731] RegEnumKeyExW (in: hKey=0x630, dwIndex=0x7, lpName=0x50298b8, lpcchName=0x731f318, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x731f318, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0185.731] RegOpenKeyExW (in: hKey=0x630, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x690) returned 0x0 [0185.731] RegOpenKeyExW (in: hKey=0x690, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x0) returned 0x2 [0185.731] RegCloseKey (hKey=0x690) returned 0x0 [0185.731] RegOpenKeyExW (in: hKey=0x630, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x690) returned 0x0 [0185.732] RegOpenKeyExW (in: hKey=0x690, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x0) returned 0x2 [0185.732] RegCloseKey (hKey=0x690) returned 0x0 [0185.732] RegOpenKeyExW (in: hKey=0x630, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x690) returned 0x0 [0185.732] RegOpenKeyExW (in: hKey=0x690, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x0) returned 0x2 [0185.732] RegCloseKey (hKey=0x690) returned 0x0 [0185.732] RegOpenKeyExW (in: hKey=0x630, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x690) returned 0x0 [0185.732] RegOpenKeyExW (in: hKey=0x690, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x0) returned 0x2 [0185.732] RegCloseKey (hKey=0x690) returned 0x0 [0185.733] RegOpenKeyExW (in: hKey=0x630, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x690) returned 0x0 [0185.733] RegOpenKeyExW (in: hKey=0x690, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x0) returned 0x2 [0185.733] RegCloseKey (hKey=0x690) returned 0x0 [0185.733] RegOpenKeyExW (in: hKey=0x630, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x690) returned 0x0 [0185.733] RegOpenKeyExW (in: hKey=0x690, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x0) returned 0x2 [0185.733] RegCloseKey (hKey=0x690) returned 0x0 [0185.733] RegOpenKeyExW (in: hKey=0x630, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x690) returned 0x0 [0185.734] RegOpenKeyExW (in: hKey=0x690, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x0) returned 0x2 [0185.734] RegCloseKey (hKey=0x690) returned 0x0 [0185.734] RegOpenKeyExW (in: hKey=0x630, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x690) returned 0x0 [0185.734] RegOpenKeyExW (in: hKey=0x690, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2d8 | out: phkResult=0x731f2d8*=0x698) returned 0x0 [0185.734] RegCloseKey (hKey=0x698) returned 0x0 [0185.734] RegCloseKey (hKey=0x630) returned 0x0 [0185.736] RegCloseKey (hKey=0x690) returned 0x0 [0185.926] CoTaskMemAlloc (cb=0x804) returned 0x7614240 [0185.926] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x7614240, nSize=0x731f3d0 | out: lpNameBuffer="NQDPDE\\FD1HVy", nSize=0x731f3d0) returned 0x1 [0186.050] CoTaskMemFree (pv=0x7614240) [0186.051] GetUserNameW (in: lpBuffer=0x731f164, pcbBuffer=0x731f3dc | out: lpBuffer="FD1HVy", pcbBuffer=0x731f3dc) returned 1 [0187.347] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f280 | out: phkResult=0x731f280*=0x644) returned 0x0 [0187.349] RegQueryInfoKeyW (in: hKey=0x644, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x731f2d0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x731f2cc, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x731f2d0*=0x8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x731f2cc*=0x13, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x0, lpName=0x50ab184, lpcchName=0x731f2ec, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x731f2ec, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] CoTaskMemFree (pv=0x0) [0187.349] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x1, lpName=0x50ab184, lpcchName=0x731f2ec, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x731f2ec, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] CoTaskMemFree (pv=0x0) [0187.349] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x2, lpName=0x50ab184, lpcchName=0x731f2ec, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x731f2ec, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] CoTaskMemFree (pv=0x0) [0187.349] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x3, lpName=0x50ab184, lpcchName=0x731f2ec, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x731f2ec, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] CoTaskMemFree (pv=0x0) [0187.349] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x4, lpName=0x50ab184, lpcchName=0x731f2ec, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x731f2ec, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] CoTaskMemFree (pv=0x0) [0187.349] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x5, lpName=0x50ab184, lpcchName=0x731f2ec, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x731f2ec, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] CoTaskMemFree (pv=0x0) [0187.349] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x6, lpName=0x50ab184, lpcchName=0x731f2ec, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x731f2ec, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] CoTaskMemFree (pv=0x0) [0187.349] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x7, lpName=0x50ab184, lpcchName=0x731f2ec, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x731f2ec, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.349] CoTaskMemFree (pv=0x0) [0187.350] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x4a4) returned 0x0 [0187.350] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x0) returned 0x2 [0187.350] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.350] RegOpenKeyExW (in: hKey=0x644, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x4a4) returned 0x0 [0187.350] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x0) returned 0x2 [0187.350] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.351] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x4a4) returned 0x0 [0187.351] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x0) returned 0x2 [0187.351] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.351] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x4a4) returned 0x0 [0187.351] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x0) returned 0x2 [0187.351] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.352] RegOpenKeyExW (in: hKey=0x644, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x4a4) returned 0x0 [0187.352] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x0) returned 0x2 [0187.352] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.352] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x4a4) returned 0x0 [0187.352] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x0) returned 0x2 [0187.352] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.353] RegOpenKeyExW (in: hKey=0x644, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x4a4) returned 0x0 [0187.353] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x0) returned 0x2 [0187.353] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.353] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x4a4) returned 0x0 [0187.353] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2ac | out: phkResult=0x731f2ac*=0x6a0) returned 0x0 [0187.353] RegCloseKey (hKey=0x6a0) returned 0x0 [0187.353] RegCloseKey (hKey=0x644) returned 0x0 [0187.354] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.356] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f28c | out: phkResult=0x731f28c*=0x4a4) returned 0x0 [0187.357] RegQueryInfoKeyW (in: hKey=0x4a4, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x731f2dc, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x731f2d8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x731f2dc*=0x8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x731f2d8*=0x13, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.357] RegEnumKeyExW (in: hKey=0x4a4, dwIndex=0x0, lpName=0x50ac190, lpcchName=0x731f2f8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x731f2f8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.357] CoTaskMemFree (pv=0x0) [0187.357] RegEnumKeyExW (in: hKey=0x4a4, dwIndex=0x1, lpName=0x50ac190, lpcchName=0x731f2f8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x731f2f8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.358] CoTaskMemFree (pv=0x0) [0187.358] RegEnumKeyExW (in: hKey=0x4a4, dwIndex=0x2, lpName=0x50ac190, lpcchName=0x731f2f8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x731f2f8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.358] CoTaskMemFree (pv=0x0) [0187.358] RegEnumKeyExW (in: hKey=0x4a4, dwIndex=0x3, lpName=0x50ac190, lpcchName=0x731f2f8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x731f2f8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.358] CoTaskMemFree (pv=0x0) [0187.358] RegEnumKeyExW (in: hKey=0x4a4, dwIndex=0x4, lpName=0x50ac190, lpcchName=0x731f2f8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x731f2f8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.358] CoTaskMemFree (pv=0x0) [0187.358] RegEnumKeyExW (in: hKey=0x4a4, dwIndex=0x5, lpName=0x50ac190, lpcchName=0x731f2f8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x731f2f8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.358] CoTaskMemFree (pv=0x0) [0187.358] RegEnumKeyExW (in: hKey=0x4a4, dwIndex=0x6, lpName=0x50ac190, lpcchName=0x731f2f8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x731f2f8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.358] CoTaskMemFree (pv=0x0) [0187.358] RegEnumKeyExW (in: hKey=0x4a4, dwIndex=0x7, lpName=0x50ac190, lpcchName=0x731f2f8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x731f2f8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.358] CoTaskMemFree (pv=0x0) [0187.358] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x644) returned 0x0 [0187.358] RegOpenKeyExW (in: hKey=0x644, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x0) returned 0x2 [0187.359] RegCloseKey (hKey=0x644) returned 0x0 [0187.359] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x644) returned 0x0 [0187.359] RegOpenKeyExW (in: hKey=0x644, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x0) returned 0x2 [0187.359] RegCloseKey (hKey=0x644) returned 0x0 [0187.359] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x644) returned 0x0 [0187.361] RegOpenKeyExW (in: hKey=0x644, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x0) returned 0x2 [0187.361] RegCloseKey (hKey=0x644) returned 0x0 [0187.361] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x644) returned 0x0 [0187.361] RegOpenKeyExW (in: hKey=0x644, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x0) returned 0x2 [0187.361] RegCloseKey (hKey=0x644) returned 0x0 [0187.362] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x644) returned 0x0 [0187.362] RegOpenKeyExW (in: hKey=0x644, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x0) returned 0x2 [0187.362] RegCloseKey (hKey=0x644) returned 0x0 [0187.362] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x644) returned 0x0 [0187.362] RegOpenKeyExW (in: hKey=0x644, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x0) returned 0x2 [0187.362] RegCloseKey (hKey=0x644) returned 0x0 [0187.363] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x644) returned 0x0 [0187.363] RegOpenKeyExW (in: hKey=0x644, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x0) returned 0x2 [0187.363] RegCloseKey (hKey=0x644) returned 0x0 [0187.363] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x644) returned 0x0 [0187.363] RegOpenKeyExW (in: hKey=0x644, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2b8 | out: phkResult=0x731f2b8*=0x6a0) returned 0x0 [0187.363] RegCloseKey (hKey=0x6a0) returned 0x0 [0187.363] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.365] RegCloseKey (hKey=0x644) returned 0x0 [0187.368] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f274 | out: phkResult=0x731f274*=0x644) returned 0x0 [0187.369] RegQueryInfoKeyW (in: hKey=0x644, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x731f2c4, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x731f2c0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x731f2c4*=0x8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x731f2c0*=0x13, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.369] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x0, lpName=0x50ad1d0, lpcchName=0x731f2e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x731f2e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.369] CoTaskMemFree (pv=0x0) [0187.369] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x1, lpName=0x50ad1d0, lpcchName=0x731f2e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x731f2e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.369] CoTaskMemFree (pv=0x0) [0187.369] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x2, lpName=0x50ad1d0, lpcchName=0x731f2e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x731f2e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.369] CoTaskMemFree (pv=0x0) [0187.369] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x3, lpName=0x50ad1d0, lpcchName=0x731f2e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x731f2e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.369] CoTaskMemFree (pv=0x0) [0187.369] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x4, lpName=0x50ad1d0, lpcchName=0x731f2e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x731f2e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.369] CoTaskMemFree (pv=0x0) [0187.369] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x5, lpName=0x50ad1d0, lpcchName=0x731f2e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x731f2e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.369] CoTaskMemFree (pv=0x0) [0187.369] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x6, lpName=0x50ad1d0, lpcchName=0x731f2e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x731f2e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.369] CoTaskMemFree (pv=0x0) [0187.369] RegEnumKeyExW (in: hKey=0x644, dwIndex=0x7, lpName=0x50ad1d0, lpcchName=0x731f2e0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x731f2e0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0187.370] CoTaskMemFree (pv=0x0) [0187.370] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x4a4) returned 0x0 [0187.370] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x0) returned 0x2 [0187.370] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.370] RegOpenKeyExW (in: hKey=0x644, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x4a4) returned 0x0 [0187.370] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x0) returned 0x2 [0187.370] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.371] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x4a4) returned 0x0 [0187.371] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x0) returned 0x2 [0187.371] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.371] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x4a4) returned 0x0 [0187.371] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x0) returned 0x2 [0187.371] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.372] RegOpenKeyExW (in: hKey=0x644, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x4a4) returned 0x0 [0187.372] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x0) returned 0x2 [0187.372] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.372] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x4a4) returned 0x0 [0187.372] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x0) returned 0x2 [0187.372] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.372] RegOpenKeyExW (in: hKey=0x644, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x4a4) returned 0x0 [0187.373] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x0) returned 0x2 [0187.373] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.373] RegOpenKeyExW (in: hKey=0x644, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x4a4) returned 0x0 [0187.373] RegOpenKeyExW (in: hKey=0x4a4, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x731f2a0 | out: phkResult=0x731f2a0*=0x6a0) returned 0x0 [0187.373] RegCloseKey (hKey=0x6a0) returned 0x0 [0187.373] RegCloseKey (hKey=0x644) returned 0x0 [0187.516] RegCloseKey (hKey=0x4a4) returned 0x0 [0187.552] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x7890004 [0187.560] ReportEventW (hEventLog=0x7890004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x50b1db4*="Registry", lpRawData=0x50b1cc8) returned 1 [0187.645] ReportEventW (hEventLog=0x7890004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x50b87d0*="Alias", lpRawData=0x50b86f8) returned 1 [0187.650] ReportEventW (hEventLog=0x7890004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x50bab90*="Environment", lpRawData=0x50baab8) returned 1 [0187.737] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x731f2a4, nSize=0x80 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf [0187.738] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x104, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0187.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x731f35c) returned 1 [0187.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0x731f3d8 | out: lpFileInformation=0x731f3d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0187.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x731f358) returned 1 [0187.740] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x731eb00, nSize=0x80 | out: lpBuffer="က澰က澰") returned 0x0 [0187.793] GetLogicalDrives () returned 0x4 [0187.794] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5 [0187.794] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x5, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0187.795] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x731f348) returned 1 [0188.078] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x731f250, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x731f370, lpMaximumComponentLength=0x731f36c, lpFileSystemFlags=0x731f368, lpFileSystemNameBuffer=0x731f1e8, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x731f370*=0xb4197730, lpMaximumComponentLength=0x731f36c*=0xff, lpFileSystemFlags=0x731f368*=0x3e702ff, lpFileSystemNameBuffer="NTFS") returned 1 [0188.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x731f344) returned 1 [0188.079] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.079] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.080] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0188.080] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0188.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x731f300) returned 1 [0188.080] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x50ca05c | out: lpFileInformation=0x50ca05c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x31b3b9e4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x865407b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x865407b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0188.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x731f2fc) returned 1 [0188.080] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0188.080] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0188.081] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.081] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.091] PathIsNetworkPathW (pszPath="C:\\") returned 0 [0188.094] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5 [0188.094] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x5, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0188.094] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.094] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0188.100] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0188.101] ReportEventW (hEventLog=0x7890004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x50cc038*="FileSystem", lpRawData=0x50cbf60) returned 1 [0188.314] ReportEventW (hEventLog=0x7890004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x50d42c0*="Function", lpRawData=0x50d41e8) returned 1 [0188.457] ReportEventW (hEventLog=0x7890004, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x50e55e8*="Variable", lpRawData=0x50e5510) returned 1 [0188.466] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.549] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.634] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.739] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.820] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0188.906] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.005] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.094] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.468] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.596] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0189.682] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.075] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.124] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.326] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.479] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.521] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.596] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.637] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.684] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.750] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.795] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.845] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.891] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.933] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0190.980] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.752] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.808] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.902] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0205.975] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.052] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.100] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.178] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.289] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.662] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.756] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.836] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0206.945] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.129] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.301] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.645] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.817] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0207.932] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.067] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.364] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.489] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.864] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0208.990] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0209.100] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0209.286] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0209.426] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0209.523] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0209.826] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0210.398] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0210.596] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0210.908] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0211.111] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0211.236] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0211.358] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0211.462] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0212.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0213.082] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0213.182] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0220.630] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1")) returned 0x20 [0220.631] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice\\PnpDevice.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pnpdevice\\pnpdevice.psd1")) returned 0x20 [0220.639] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient\\VpnClient.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\vpnclient\\vpnclient.psd1")) returned 0x20 [0220.643] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob\\PSScheduledJob.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psscheduledjob\\psscheduledjob.psd1")) returned 0x20 [0220.644] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration\\PSDesiredStateConfiguration.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration\\psdesiredstateconfiguration.psd1")) returned 0x20 [0220.659] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting\\WindowsErrorReporting.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowserrorreporting\\windowserrorreporting.psd1")) returned 0x20 [0220.660] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\cimcmdlets\\cimcmdlets.psd1")) returned 0x20 [0220.661] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc\\MsDtc.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msdtc\\msdtc.psd1")) returned 0x20 [0220.670] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP\\NetTCPIP.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\nettcpip\\nettcpip.psd1")) returned 0x20 [0220.673] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\ise\\ise.psd1")) returned 0x20 [0220.674] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1")) returned 0x20 [0220.674] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache\\BranchCache.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\branchcache\\branchcache.psd1")) returned 0x20 [0220.681] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics\\microsoft.powershell.diagnostics.psd1")) returned 0x20 [0220.682] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage\\Storage.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\storage\\storage.psd1")) returned 0x20 [0220.796] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos\\NetQos.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netqos\\netqos.psd1")) returned 0x20 [0220.798] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter\\NetAdapter.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netadapter\\netadapter.psd1")) returned 0x20 [0220.803] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents\\DirectAccessClientComponents.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\directaccessclientcomponents\\directaccessclientcomponents.psd1")) returned 0x20 [0220.839] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate\\WindowsUpdate.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsupdate\\windowsupdate.psd1")) returned 0x20 [0220.841] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition\\NetworkTransition.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networktransition\\networktransition.psd1")) returned 0x20 [0220.844] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1")) returned 0x20 [0220.844] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks\\ScheduledTasks.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\scheduledtasks\\scheduledtasks.psd1")) returned 0x20 [0220.876] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection\\NetConnection.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netconnection\\netconnection.psd1")) returned 0x20 [0220.880] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI\\iSCSI.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\iscsi\\iscsi.psd1")) returned 0x20 [0220.893] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus\\NetworkConnectivityStatus.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networkconnectivitystatus\\networkconnectivitystatus.psd1")) returned 0x20 [0220.902] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psm1")) returned 0x20 [0220.909] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam\\NetSwitchTeam.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netswitchteam\\netswitchteam.psd1")) returned 0x20 [0220.911] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1")) returned 0x20 [0220.912] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psm1")) returned 0x20 [0220.913] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo\\NetLbfo.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netlbfo\\netlbfo.psd1")) returned 0x20 [0220.941] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS\\TLS.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\tls\\tls.psd1")) returned 0x20 [0220.942] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics\\PSDiagnostics.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdiagnostics\\psdiagnostics.psd1")) returned 0x20 [0220.943] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0220.945] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psm1")) returned 0x20 [0220.947] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker\\AppLocker.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\applocker\\applocker.psd1")) returned 0x20 [0220.948] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1")) returned 0x20 [0220.949] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule\\TrustedPlatformModule.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\trustedplatformmodule\\trustedplatformmodule.psd1")) returned 0x20 [0220.950] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack\\TroubleshootingPack.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\troubleshootingpack\\troubleshootingpack.psd1")) returned 0x20 [0220.951] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV\\UEV.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\uev\\uev.psd1")) returned 0x20 [0220.951] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils\\microsoft.powershell.odatautils.psd1")) returned 0x20 [0220.956] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement\\EventTracingManagement.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\eventtracingmanagement\\eventtracingmanagement.psd1")) returned 0x20 [0220.966] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1")) returned 0x20 [0220.966] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism\\Dism.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dism\\dism.psd1")) returned 0x20 [0220.967] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1")) returned 0x20 [0220.968] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1")) returned 0x20 [0220.968] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense\\WindowsDeveloperLicense.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsdeveloperlicense\\windowsdeveloperlicense.psd1")) returned 0x20 [0220.968] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac\\Wdac.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\wdac\\wdac.psd1")) returned 0x20 [0221.051] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient\\AppvClient.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appvclient\\appvclient.psd1")) returned 0x20 [0221.054] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity\\NetSecurity.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netsecurity\\netsecurity.psd1")) returned 0x20 [0221.078] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psm1")) returned 0x20 [0221.079] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0221.079] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0221.080] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host\\microsoft.powershell.host.psd1")) returned 0x20 [0221.081] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat\\NetNat.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netnat\\netnat.psd1")) returned 0x20 [0221.098] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1")) returned 0x20 [0221.098] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadLine.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psm1")) returned 0x20 [0221.099] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadLine.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psm1")) returned 0x20 [0221.102] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1")) returned 0x20 [0221.102] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement\\PrintManagement.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\printmanagement\\printmanagement.psd1")) returned 0x20 [0221.152] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient\\DnsClient.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dnsclient\\dnsclient.psd1")) returned 0x20 [0221.340] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx\\Appx.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appx\\appx.psd1")) returned 0x20 [0221.340] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1")) returned 0x20 [0221.340] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1")) returned 0x20 [0221.341] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture\\NetEventPacketCapture.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\neteventpacketcapture\\neteventpacketcapture.psd1")) returned 0x20 [0221.356] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1")) returned 0x20 [0221.357] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI\\PKI.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pki\\pki.psd1")) returned 0x20 [0221.357] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management\\Microsoft.WSMan.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management\\microsoft.wsman.management.psd1")) returned 0x20 [0221.358] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International\\International.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\international\\international.psd1")) returned 0x20 [0221.358] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds\\Kds.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\kds\\kds.psd1")) returned 0x20 [0221.359] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting\\WindowsErrorReporting.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowserrorreporting\\windowserrorreporting.psm1")) returned 0x20 [0221.360] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1")) returned 0x20 [0221.361] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0221.361] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive\\microsoft.powershell.archive.psd1")) returned 0x20 [0221.361] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot\\SecureBoot.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\secureboot\\secureboot.psd1")) returned 0x20 [0221.364] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.384] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.468] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.580] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.680] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0221.899] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.001] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.128] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.237] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.518] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.640] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.738] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.831] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0222.909] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.002] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.096] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.192] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.435] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.525] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.635] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.737] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.831] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0223.925] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.002] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0224.096] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.276] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.478] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.572] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0231.712] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.116] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.209] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.312] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.452] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.593] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0232.734] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.015] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.171] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.312] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.454] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.616] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0233.720] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.119] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.256] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.458] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.601] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0234.706] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.004] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.195] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.314] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.460] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.610] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0235.972] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0236.125] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0236.260] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0236.398] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0236.548] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0236.716] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0236.885] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0237.119] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0237.214] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0237.325] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0237.445] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0237.563] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0237.693] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0237.836] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0238.006] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0238.231] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0238.384] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0238.543] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0238.668] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0238.793] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0238.919] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0239.041] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0239.135] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0239.363] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0239.511] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0239.655] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0239.805] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0239.931] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.024] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.157] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.501] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.648] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0240.906] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0241.087] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0241.277] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0241.675] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0241.881] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0242.057] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0242.241] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0242.599] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0242.888] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0243.215] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0243.467] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0243.805] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0243.941] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.082] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.223] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.378] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.818] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0244.959] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.145] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.332] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.488] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0245.582] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 Thread: id = 183 os_tid = 0x135c Thread: id = 184 os_tid = 0x1158 Thread: id = 185 os_tid = 0x50c Thread: id = 187 os_tid = 0xce8 Thread: id = 188 os_tid = 0x1160 [0177.811] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0177.811] CoGetContextToken (in: pToken=0x780f5cc | out: pToken=0x780f5cc) returned 0x0 [0177.811] CObjectContext::QueryInterface () returned 0x0 [0177.811] CObjectContext::GetCurrentThreadType () returned 0x0 [0177.812] Release () returned 0x0 [0177.812] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0177.812] CoUninitialize () [0177.812] RoInitialize () returned 0x1 [0177.812] RoUninitialize () returned 0x0 [0248.165] CoGetContextToken (in: pToken=0x780f37c | out: pToken=0x780f37c) returned 0x0 [0248.165] CObjectContext::QueryInterface () returned 0x0 [0248.165] CObjectContext::GetCurrentThreadType () returned 0x0 [0248.165] Release () returned 0x0 [0248.226] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 189 os_tid = 0xd08 [0177.853] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0177.853] RoInitialize () returned 0x1 [0177.853] RoUninitialize () returned 0x0 [0177.855] GetCurrentProcessId () returned 0x1060 [0177.858] EtwEventWriteTransfer (RegHandle=0x1058730, EventDescriptor=0x2e, ActivityId=0x788f53c, RelatedActivityId=0x788f4ec, UserDataCount=0x0, UserData=0x8) returned 0x0 [0177.858] EtwEventWriteTransfer (RegHandle=0x1058730, EventDescriptor=0x2e, ActivityId=0x788f568, RelatedActivityId=0x788f518, UserDataCount=0x0, UserData=0x2) returned 0x0 [0177.860] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x664 [0177.866] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Threading.OverlappedData_Disabled", lpBuffer=0x788ec9c, nSize=0x80 | out: lpBuffer="က牥\x01") returned 0x0 [0177.866] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Threading.OverlappedData_MinCount", lpBuffer=0x788ec9c, nSize=0x80 | out: lpBuffer="က牥\x01") returned 0x0 [0177.870] EtwEventRegister (in: ProviderId=0x4f608d4, EnableCallback=0x4c72cb6, CallbackContext=0x0, RegHandle=0x4f608b0 | out: RegHandle=0x4f608b0) returned 0x0 [0177.870] EtwEventSetInformation (RegHandle=0x7520660, InformationClass=0x50, EventInformation=0x2, InformationLength=0x4f60878) returned 0x0 [0177.874] ConnectNamedPipe (in: hNamedPipe=0x640, lpOverlapped=0x4f60abc | out: lpOverlapped=0x4f60abc) returned 0 Thread: id = 192 os_tid = 0x11d8 Thread: id = 193 os_tid = 0x11ac Thread: id = 194 os_tid = 0x1124 Thread: id = 198 os_tid = 0x1228 [0201.008] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0201.307] RoInitialize () returned 0x1 [0201.307] RoUninitialize () returned 0x0 [0201.309] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x85deedc*=0x6e8, lpdwindex=0x85decfc | out: lpdwindex=0x85decfc) returned 0x0 [0201.315] SetThreadUILanguage (LangId=0x0) returned 0xdc0409 [0201.436] EtwEventRegister (in: ProviderId=0x51d55dc, EnableCallback=0x4c72e06, CallbackContext=0x0, RegHandle=0x51d55b8 | out: RegHandle=0x51d55b8) returned 0x0 [0201.437] EtwEventSetInformation (RegHandle=0x7521ed8, InformationClass=0x59, EventInformation=0x2, InformationLength=0x51d5590) returned 0x0 [0202.190] CoCreateGuid (in: pguid=0x85ded48 | out: pguid=0x85ded48*(Data1=0x57dee385, Data2=0x2d7b, Data3=0x4d64, Data4=([0]=0x9d, [1]=0x5f, [2]=0x23, [3]=0xd7, [4]=0xa4, [5]=0x24, [6]=0x8e, [7]=0x40))) returned 0x0 [0202.249] QueryPerformanceCounter (in: lpPerformanceCount=0x85ded28 | out: lpPerformanceCount=0x85ded28*=29752909424) returned 1 [0202.251] AmsiOpenSession () returned 0x0 [0202.251] AmsiScanString () returned 0x80070015 [0205.748] CoCreateGuid (in: pguid=0x85de1d8 | out: pguid=0x85de1d8*(Data1=0x18e9f0d6, Data2=0xc5f8, Data3=0x49fa, Data4=([0]=0x96, [1]=0xe4, [2]=0x49, [3]=0xc1, [4]=0x86, [5]=0x9, [6]=0x2a, [7]=0x89))) returned 0x0 [0206.902] QueryPerformanceCounter (in: lpPerformanceCount=0x85decf0 | out: lpPerformanceCount=0x85decf0*=30218286178) returned 1 [0207.014] EtwEventRegister (in: ProviderId=0x51e6a18, EnableCallback=0x4c72f3e, CallbackContext=0x0, RegHandle=0x51e69f4 | out: RegHandle=0x51e69f4) returned 0x0 [0207.015] EtwEventSetInformation (RegHandle=0x79d8a68, InformationClass=0x63, EventInformation=0x2, InformationLength=0x51e69c4) returned 0x0 [0207.015] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x85deb60, nSize=0x80 | out: lpBuffer="ᆲ獖က澰스澻\x01耀哔玲ᇶ獖\x02") returned 0x0 [0208.074] EtwEventActivityIdControl (in: ControlCode=0x3, ActivityId=0x85dedb8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85dedb8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x38, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0208.074] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85ded24*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85ded24*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0))) returned 0x0 [0208.075] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0x85deda8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x38, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0x85deda8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x38, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0208.368] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x85de374, nSize=0x80 | out: lpBuffer="᤮獖က澰က澰") returned 0x0 [0208.368] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x85de374, nSize=0x80 | out: lpBuffer="᤮獖က澰က澰") returned 0x0 [0208.379] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x85de360, nSize=0x80 | out: lpBuffer="က澰က澰") returned 0x0 [0208.392] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x85debcc | out: phkResult=0x85debcc*=0x0) returned 0x2 [0208.394] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x85debcc | out: phkResult=0x85debcc*=0x0) returned 0x2 [0208.396] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x85de330, nSize=0x80 | out: lpBuffer="က澰က澰") returned 0x0 [0208.866] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x85de768, nSize=0x80 | out: lpBuffer="壘ޞf") returned 0x0 [0208.873] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x85de684, nSize=0x80 | out: lpBuffer="") returned 0xbc [0208.873] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x85de60c, nSize=0xbc | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0208.881] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x85de5f8, nSize=0xbc | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 0x3a [0209.000] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x10c3ff0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0209.103] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x85de600, nSize=0xbc | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 0x3a [0209.106] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x104, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0209.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0209.106] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath" (normalized: "c:\\programdata\\oracle\\java\\javapath"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0209.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0209.119] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0209.119] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x24, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0209.122] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\Start-Sleep.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0209.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0209.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0209.124] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x85dde90, nSize=0xbc | out: lpBuffer="抈琖") returned 0x0 [0209.125] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0209.125] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0209.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0209.125] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec28c54, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xebb5ab66, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xebb5ab66, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0209.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0209.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0209.125] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0209.125] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0209.125] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\Start-Sleep.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0209.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0209.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0209.126] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0209.126] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0xb, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS", lpFilePart=0x0) returned 0xa [0209.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0209.126] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0209.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0209.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0209.127] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0209.127] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0xb, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS", lpFilePart=0x0) returned 0xa [0209.127] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\Start-Sleep.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0209.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0209.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0209.127] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0209.127] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0209.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0209.128] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem" (normalized: "c:\\windows\\system32\\wbem"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb288124d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb288124d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0209.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0209.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0209.128] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0209.128] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0209.128] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\Start-Sleep.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0209.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0209.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0209.129] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0209.129] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0209.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0209.129] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x172cbef, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8cfff4c6, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0209.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0209.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0209.129] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0209.129] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0209.130] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\Start-Sleep.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0209.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0209.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0209.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0209.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x34, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0209.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0209.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windowsapps"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0209.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0209.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0209.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x34, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0209.132] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\Start-Sleep.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0209.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0209.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0209.136] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x85de664, nSize=0xbc | out: lpBuffer="") returned 0xc3 [0209.136] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x85de654, nSize=0xc3 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0xc2 [0209.291] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0209.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0209.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0209.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x2b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x2a [0209.296] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578690 [0209.299] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.299] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0209.300] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0209.300] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0209.300] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0209.301] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 1 [0209.301] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.301] FindClose (in: hFindFile=0x7578690 | out: hFindFile=0x7578690) returned 1 [0209.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0209.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0209.303] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0209.304] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0209.305] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0209.305] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0209.305] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0209.305] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0209.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0209.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x55, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x54 [0209.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0209.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0209.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0209.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0209.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0209.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0209.309] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0209.309] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x32, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x31 [0209.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0209.309] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester" (normalized: "c:\\program files\\windowspowershell\\modules\\pester"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0209.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0209.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0209.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0209.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0209.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0209.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x36, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", lpFilePart=0x0) returned 0x35 [0209.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0209.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0209.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0209.313] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0209.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x55, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x54 [0209.314] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578190 [0209.314] FindNextFileW (in: hFindFile=0x7578190, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.314] FindNextFileW (in: hFindFile=0x7578190, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0209.315] FindNextFileW (in: hFindFile=0x7578190, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.315] FindClose (in: hFindFile=0x7578190 | out: hFindFile=0x7578190) returned 1 [0209.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0209.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0209.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0209.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0209.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0209.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0209.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0209.323] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0209.323] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0209.324] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0209.324] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0209.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0209.324] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x521783c | out: lpFileInformation=0x521783c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0209.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0209.326] GetEnvironmentVariableW (in: lpName="PSModuleAnalysisCachePath", lpBuffer=0x85dd808, nSize=0xc3 | out: lpBuffer="䉀ݡ䤜ׯ?࡝玮၀澰က澰က澰᝖珇⋺獖က澰澻\x01耀䉀ݡ䉀ݡㄠē?࡝獔烜\x02") returned 0x0 [0209.327] CoTaskMemAlloc (cb=0x20c) returned 0x75fedb8 [0209.327] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x75fedb8 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x0 [0209.327] CoTaskMemFree (pv=0x75fedb8) [0209.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1e [0209.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x1e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0209.328] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache")) returned 0x20 [0209.330] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0209.330] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x4f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x4e [0209.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85ddfa8) returned 1 [0209.330] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x774 [0209.330] GetFileType (hFile=0x774) returned 0x1 [0209.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85ddfa4) returned 1 [0209.330] GetFileType (hFile=0x774) returned 0x1 [0209.331] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de01c, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de01c*=0x1000, lpOverlapped=0x0) returned 1 [0209.342] ReadFile (in: hFile=0x774, lpBuffer=0x52185bd, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185bd*, lpNumberOfBytesRead=0x85de024*=0x4, lpOverlapped=0x0) returned 1 [0209.427] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.428] ReadFile (in: hFile=0x774, lpBuffer=0x52185be, nNumberOfBytesToRead=0x9, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185be*, lpNumberOfBytesRead=0x85de024*=0x9, lpOverlapped=0x0) returned 1 [0209.428] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.429] ReadFile (in: hFile=0x774, lpBuffer=0x52185bf, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185bf*, lpNumberOfBytesRead=0x85de024*=0x5, lpOverlapped=0x0) returned 1 [0209.429] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.429] ReadFile (in: hFile=0x774, lpBuffer=0x52185d1, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185d1*, lpNumberOfBytesRead=0x85de024*=0x5, lpOverlapped=0x0) returned 1 [0209.429] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.429] ReadFile (in: hFile=0x774, lpBuffer=0x52185d0, nNumberOfBytesToRead=0x6, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185d0*, lpNumberOfBytesRead=0x85de024*=0x6, lpOverlapped=0x0) returned 1 [0209.429] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.430] ReadFile (in: hFile=0x774, lpBuffer=0x52185d1, nNumberOfBytesToRead=0x3a, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185d1*, lpNumberOfBytesRead=0x85de024*=0x3a, lpOverlapped=0x0) returned 1 [0209.430] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.430] ReadFile (in: hFile=0x774, lpBuffer=0x52185ca, nNumberOfBytesToRead=0x3, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185ca*, lpNumberOfBytesRead=0x85de024*=0x3, lpOverlapped=0x0) returned 1 [0209.430] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.431] ReadFile (in: hFile=0x774, lpBuffer=0x52185bd, nNumberOfBytesToRead=0xe, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185bd*, lpNumberOfBytesRead=0x85de024*=0xe, lpOverlapped=0x0) returned 1 [0209.431] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.431] ReadFile (in: hFile=0x774, lpBuffer=0x52185bb, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x85de010, lpOverlapped=0x0 | out: lpBuffer=0x52185bb*, lpNumberOfBytesRead=0x85de010*=0x1, lpOverlapped=0x0) returned 1 [0209.431] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.432] ReadFile (in: hFile=0x774, lpBuffer=0x52185bc, nNumberOfBytesToRead=0x12, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185bc*, lpNumberOfBytesRead=0x85de024*=0x12, lpOverlapped=0x0) returned 1 [0209.432] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0x1000, lpOverlapped=0x0) returned 1 [0209.432] ReadFile (in: hFile=0x774, lpBuffer=0x52185ca, nNumberOfBytesToRead=0x3, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52185ca*, lpNumberOfBytesRead=0x85de024*=0x3, lpOverlapped=0x0) returned 1 [0209.433] ReadFile (in: hFile=0x774, lpBuffer=0x52189e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85de024, lpOverlapped=0x0 | out: lpBuffer=0x52189e0*, lpNumberOfBytesRead=0x85de024*=0xd4c, lpOverlapped=0x0) returned 1 [0209.433] GetEnvironmentVariableW (in: lpName="PSDisableModuleAnalysisCacheCleanup", lpBuffer=0x85dde88, nSize=0xc3 | out: lpBuffer="\x03") returned 0x0 [0209.434] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x85ddfcc | out: UnbiasedTime=0x85ddfcc) returned 1 [0210.407] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x85ddfbc | out: UnbiasedTime=0x85ddfbc) returned 1 [0210.408] CloseHandle (hObject=0x774) returned 1 [0210.409] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psd1")) returned 0xffffffff [0210.409] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psm1")) returned 0xffffffff [0210.410] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.cdxml")) returned 0xffffffff [0210.410] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.xaml")) returned 0xffffffff [0210.410] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.ni.dll")) returned 0xffffffff [0210.410] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.dll")) returned 0xffffffff [0210.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0210.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0210.411] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x75781d0 [0210.411] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.411] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0210.412] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.412] FindClose (in: hFindFile=0x75781d0 | out: hFindFile=0x75781d0) returned 1 [0210.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0210.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0210.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0210.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0210.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0210.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0210.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0210.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x524f7cc | out: lpFileInformation=0x524f7cc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0210.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.417] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0210.417] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0210.418] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0210.418] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0210.418] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0210.418] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0210.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0210.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x32, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x31 [0210.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578690 [0210.419] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.419] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0210.420] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0210.420] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.420] FindClose (in: hFindFile=0x7578690 | out: hFindFile=0x7578690) returned 1 [0210.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0210.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0210.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0210.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0210.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0210.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0210.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0210.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x52513bc | out: lpFileInformation=0x52513bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0210.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.432] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0210.432] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0210.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0210.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0210.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0210.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0210.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0210.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x525166c | out: lpFileInformation=0x525166c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0210.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.438] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.psd1")) returned 0xffffffff [0210.438] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.psm1")) returned 0xffffffff [0210.438] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.cdxml")) returned 0xffffffff [0210.438] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.xaml")) returned 0xffffffff [0210.439] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.ni.dll")) returned 0xffffffff [0210.439] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.dll")) returned 0xffffffff [0210.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0210.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0210.439] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x75781d0 [0210.440] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.440] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0210.441] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.441] FindClose (in: hFindFile=0x75781d0 | out: hFindFile=0x75781d0) returned 1 [0210.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0210.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0210.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0210.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0210.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0210.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0210.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0210.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5252d28 | out: lpFileInformation=0x5252d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0210.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.445] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0210.445] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0210.446] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0210.446] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0210.446] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0210.446] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0210.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0210.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x36, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", lpFilePart=0x0) returned 0x35 [0210.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578310 [0210.447] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.447] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1", cAlternateFileName="")) returned 1 [0210.448] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 1 [0210.448] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.448] FindClose (in: hFindFile=0x7578310 | out: hFindFile=0x7578310) returned 1 [0210.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0210.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6)) returned 1 [0210.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0210.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0210.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x525471c | out: lpFileInformation=0x525471c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6)) returned 1 [0210.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.453] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.453] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0210.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0210.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0210.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0210.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5254974 | out: lpFileInformation=0x5254974*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0210.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.458] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.psd1")) returned 0xffffffff [0210.458] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.psm1")) returned 0xffffffff [0210.458] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.cdxml")) returned 0xffffffff [0210.459] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.xaml")) returned 0xffffffff [0210.459] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.ni.dll")) returned 0xffffffff [0210.459] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.dll")) returned 0xffffffff [0210.463] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\modules")) returned 0xffffffff [0210.615] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0210.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0210.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x31, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x30 [0210.623] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578690 [0210.626] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.626] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0210.626] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0210.627] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0210.627] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0210.627] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.628] FindClose (in: hFindFile=0x7578690 | out: hFindFile=0x7578690) returned 1 [0210.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.629] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0210.631] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0210.631] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0210.631] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0210.631] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0210.631] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0210.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0210.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x5b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x5a [0210.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0210.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0210.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0210.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0210.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0210.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0210.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0210.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x37 [0210.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0210.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0210.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0210.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0210.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0210.913] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0210.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0210.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0210.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x5b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x5a [0210.916] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x75781d0 [0210.917] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.917] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0210.918] FindNextFileW (in: hFindFile=0x75781d0, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.918] FindClose (in: hFindFile=0x75781d0 | out: hFindFile=0x75781d0) returned 1 [0210.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x90 [0210.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x90, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x8f [0210.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0210.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x90 [0210.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x90, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x8f [0210.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x90 [0210.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x90, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x8f [0210.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.924] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x525f7e4 | out: lpFileInformation=0x525f7e4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0210.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.925] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psd1")) returned 0xffffffff [0210.925] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psm1")) returned 0xffffffff [0210.925] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.cdxml")) returned 0xffffffff [0210.926] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.xaml")) returned 0xffffffff [0210.926] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.ni.dll")) returned 0xffffffff [0210.926] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.dll")) returned 0xffffffff [0210.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0210.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0210.927] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578310 [0210.927] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.928] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0210.928] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.929] FindClose (in: hFindFile=0x7578310 | out: hFindFile=0x7578310) returned 1 [0210.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0210.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0210.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0210.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0210.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0210.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0210.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0210.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5261c28 | out: lpFileInformation=0x5261c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0210.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.934] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0210.934] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0210.935] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0210.935] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0210.935] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0210.935] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0210.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0210.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x37 [0210.935] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578310 [0210.936] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.936] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7fefb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0210.937] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0210.937] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.937] FindClose (in: hFindFile=0x7578310 | out: hFindFile=0x7578310) returned 1 [0210.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0210.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0210.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0210.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0210.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x52638c0 | out: lpFileInformation=0x52638c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0210.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0210.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0210.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0210.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0210.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0210.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x5263b00 | out: lpFileInformation=0x5263b00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0210.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.947] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.psd1")) returned 0xffffffff [0210.947] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.psm1")) returned 0xffffffff [0210.947] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.cdxml")) returned 0xffffffff [0210.948] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.xaml")) returned 0xffffffff [0210.948] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.ni.dll")) returned 0xffffffff [0210.948] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.dll")) returned 0xffffffff [0210.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0210.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0210.948] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578310 [0210.949] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.949] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbca000ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0210.949] FindNextFileW (in: hFindFile=0x7578310, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.949] FindClose (in: hFindFile=0x7578310 | out: hFindFile=0x7578310) returned 1 [0210.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0210.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0210.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0210.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0210.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0210.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a83f191, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0210.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0210.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0210.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0210.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0210.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0210.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0210.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x52652e8 | out: lpFileInformation=0x52652e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a83f191, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0210.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0210.954] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0210.954] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0210.955] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0210.955] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0210.955] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0210.955] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0210.960] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules")) returned 0x10 [0210.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0210.962] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0210.962] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x33, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpFilePart=0x0) returned 0x32 [0210.962] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x55ba8b37, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x55ba8b37, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578690 [0210.964] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x55ba8b37, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x55ba8b37, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.966] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e35c2e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1902eb1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe9611c78, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppLocker", cAlternateFileName="APPLOC~1")) returned 1 [0210.966] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e35c2e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x197a24f, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x76586f17, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvClient", cAlternateFileName="APPVCL~1")) returned 1 [0210.967] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197bc54, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Appx", cAlternateFileName="")) returned 1 [0210.967] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197c4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer", cAlternateFileName="BITSTR~1")) returned 1 [0210.967] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e5be8c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x197cd93, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe966970b, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BranchCache", cAlternateFileName="BRANCH~1")) returned 1 [0210.968] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197d5fb, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets", cAlternateFileName="CIMCMD~1")) returned 1 [0210.968] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19ea3b1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20706767, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectAccessClientComponents", cAlternateFileName="DIRECT~1")) returned 1 [0210.969] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19eb58e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8cfff4c6, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dism", cAlternateFileName="")) returned 1 [0210.969] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19ec84e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20706767, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DnsClient", cAlternateFileName="DNSCLI~1")) returned 1 [0210.969] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a636cb, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventTracingManagement", cAlternateFileName="EVENTT~1")) returned 1 [0210.970] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a63ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="International", cAlternateFileName="INTERN~1")) returned 1 [0210.970] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a648ba, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI", cAlternateFileName="")) returned 1 [0211.112] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a65091, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISE", cAlternateFileName="")) returned 1 [0211.112] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a65832, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kds", cAlternateFileName="")) returned 1 [0211.112] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a6609c, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive", cAlternateFileName="MICROS~1.ARC")) returned 1 [0211.113] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a67503, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0211.113] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a67e99, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host", cAlternateFileName="MICROS~1.HOS")) returned 1 [0211.113] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a686f1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management", cAlternateFileName="MICROS~1.MAN")) returned 1 [0211.114] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1ac9e27, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils", cAlternateFileName="MICROS~1.ODA")) returned 1 [0211.114] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acae81, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security", cAlternateFileName="MICROS~1.SEC")) returned 1 [0211.114] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acb52e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility", cAlternateFileName="MICROS~1.UTI")) returned 1 [0211.115] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acc005, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WSMan.Management", cAlternateFileName="MICROS~2.MAN")) returned 1 [0211.115] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acdc29, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsDtc", cAlternateFileName="")) returned 1 [0211.115] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20c0ce20, ftCreationTime.dwHighDateTime=0x1d32773, ftLastAccessTime.dwLowDateTime=0x243555cf, ftLastAccessTime.dwHighDateTime=0x1d32773, ftLastWriteTime.dwLowDateTime=0x243555cf, ftLastWriteTime.dwHighDateTime=0x1d32773, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMQ", cAlternateFileName="")) returned 1 [0211.115] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acff90, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2079f100, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetAdapter", cAlternateFileName="NETADA~1")) returned 1 [0211.115] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1bb671a, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2079f100, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetConnection", cAlternateFileName="NETCON~1")) returned 1 [0211.116] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1bb70fa, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207c536a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetEventPacketCapture", cAlternateFileName="NETEVE~1")) returned 1 [0211.116] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c2fdb4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207c536a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetLbfo", cAlternateFileName="")) returned 1 [0211.116] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c7d5c2, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207eb5c8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetNat", cAlternateFileName="")) returned 1 [0211.116] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c7e767, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207eb5c8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetQos", cAlternateFileName="")) returned 1 [0211.116] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1d3e2ea, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetSecurity", cAlternateFileName="NETSEC~1")) returned 1 [0211.117] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dbbc19, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2081182e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetSwitchTeam", cAlternateFileName="NETSWI~1")) returned 1 [0211.118] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dbc877, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20837aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetTCPIP", cAlternateFileName="")) returned 1 [0211.118] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e300dc, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20837aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkConnectivityStatus", cAlternateFileName="NETWOR~1")) returned 1 [0211.118] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e30eea, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkTransition", cAlternateFileName="NETWOR~2")) returned 1 [0211.118] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e319e4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PKI", cAlternateFileName="")) returned 1 [0211.119] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e92e4b, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PnpDevice", cAlternateFileName="PNPDEV~1")) returned 1 [0211.119] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e93bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x208aa1cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrintManagement", cAlternateFileName="PRINTM~1")) returned 1 [0211.120] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e950c4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDesiredStateConfiguration", cAlternateFileName="PSDESI~1")) returned 1 [0211.120] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1f64ff6, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDiagnostics", cAlternateFileName="PSDIAG~1")) returned 1 [0211.121] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1f65404, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSScheduledJob", cAlternateFileName="PSSCHE~1")) returned 1 [0211.121] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb8b03, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScheduledTasks", cAlternateFileName="SCHEDU~1")) returned 1 [0211.121] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb91fe, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecureBoot", cAlternateFileName="SECURE~1")) returned 1 [0211.122] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb9d09, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20968dca, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Storage", cAlternateFileName="")) returned 1 [0211.122] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fba32e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20968dca, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLS", cAlternateFileName="")) returned 1 [0211.123] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbaba9, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TroubleshootingPack", cAlternateFileName="TROUBL~1")) returned 1 [0211.123] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbbc28, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrustedPlatformModule", cAlternateFileName="TRUSTE~1")) returned 1 [0211.124] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e5be8c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1fbcd58, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe966970b, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UEV", cAlternateFileName="")) returned 1 [0211.124] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbd4ae, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VpnClient", cAlternateFileName="VPNCLI~1")) returned 1 [0211.125] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205dc90, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wdac", cAlternateFileName="")) returned 1 [0211.125] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205e730, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsDeveloperLicense", cAlternateFileName="WINDOW~1")) returned 1 [0211.126] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205efde, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsErrorReporting", cAlternateFileName="WINDOW~2")) returned 1 [0211.126] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205f3c7, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate", cAlternateFileName="WINDOW~3")) returned 1 [0211.127] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0211.127] FindClose (in: hFindFile=0x7578690 | out: hFindFile=0x7578690) returned 1 [0211.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0211.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0211.128] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.psd1")) returned 0xffffffff [0211.128] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.psm1")) returned 0xffffffff [0211.128] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.cdxml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.cdxml")) returned 0xffffffff [0211.129] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.xaml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.xaml")) returned 0xffffffff [0211.129] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.ni.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.ni.dll")) returned 0xffffffff [0211.129] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.dll")) returned 0xffffffff [0211.129] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0211.129] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", lpFilePart=0x0) returned 0x3c [0211.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.129] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\applocker"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e35c2e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1902eb1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe9611c78, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.130] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0211.130] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", nBufferLength=0x3e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", lpFilePart=0x0) returned 0x3d [0211.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.131] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appvclient"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e35c2e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x197a24f, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x76586f17, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.132] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0211.132] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", lpFilePart=0x0) returned 0x37 [0211.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.133] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appx"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197bc54, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.133] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0211.133] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0211.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.133] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\bitstransfer"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197c4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.134] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0211.134] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", nBufferLength=0x3f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", lpFilePart=0x0) returned 0x3e [0211.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.135] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\branchcache"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e5be8c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x197cd93, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe966970b, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.136] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0211.136] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x3e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", lpFilePart=0x0) returned 0x3d [0211.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.136] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\cimcmdlets"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197d5fb, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.137] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0211.137] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", lpFilePart=0x0) returned 0x4f [0211.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.137] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\directaccessclientcomponents"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19ea3b1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20706767, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.138] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0211.138] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", lpFilePart=0x0) returned 0x37 [0211.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.138] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dism"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19eb58e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8cfff4c6, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.140] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0211.140] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", lpFilePart=0x0) returned 0x3c [0211.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.140] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dnsclient"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19ec84e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20706767, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.142] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0211.142] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", lpFilePart=0x0) returned 0x49 [0211.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.142] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\eventtracingmanagement"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a636cb, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.143] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0211.143] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", lpFilePart=0x0) returned 0x40 [0211.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.144] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\international"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a63ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.145] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0211.145] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", nBufferLength=0x39, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", lpFilePart=0x0) returned 0x38 [0211.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.145] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\iscsi"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a648ba, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.237] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0211.237] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", lpFilePart=0x0) returned 0x36 [0211.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.238] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\ise"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a65091, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.238] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0211.238] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", lpFilePart=0x0) returned 0x36 [0211.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.238] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\kds"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a65832, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.239] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0211.239] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", lpFilePart=0x0) returned 0x4f [0211.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.239] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a6609c, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.240] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0211.240] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", lpFilePart=0x0) returned 0x53 [0211.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.240] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a67503, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.368] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0211.368] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x4d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", lpFilePart=0x0) returned 0x4c [0211.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.368] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a67e99, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.369] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0211.369] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0211.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.369] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a686f1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.370] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0211.371] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x53, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", lpFilePart=0x0) returned 0x52 [0211.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.371] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1ac9e27, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.371] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0211.371] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0211.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.372] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acae81, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.373] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0211.373] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0211.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.373] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acb52e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.374] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0211.374] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x4e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", lpFilePart=0x0) returned 0x4d [0211.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.374] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acc005, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.376] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0211.376] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", nBufferLength=0x39, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", lpFilePart=0x0) returned 0x38 [0211.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.376] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msdtc"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acdc29, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.377] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0211.377] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", lpFilePart=0x0) returned 0x37 [0211.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.377] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msmq"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20c0ce20, ftCreationTime.dwHighDateTime=0x1d32773, ftLastAccessTime.dwLowDateTime=0x243555cf, ftLastAccessTime.dwHighDateTime=0x1d32773, ftLastWriteTime.dwLowDateTime=0x243555cf, ftLastWriteTime.dwHighDateTime=0x1d32773, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.380] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0211.380] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", nBufferLength=0x3e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", lpFilePart=0x0) returned 0x3d [0211.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.380] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netadapter"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acff90, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2079f100, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.381] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0211.381] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", lpFilePart=0x0) returned 0x40 [0211.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.381] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netconnection"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1bb671a, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2079f100, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.382] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0211.382] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", lpFilePart=0x0) returned 0x48 [0211.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.382] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\neteventpacketcapture"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1bb70fa, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207c536a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.389] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0211.389] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", nBufferLength=0x3b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", lpFilePart=0x0) returned 0x3a [0211.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.390] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netlbfo"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c2fdb4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207c536a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.390] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0211.390] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", nBufferLength=0x3a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", lpFilePart=0x0) returned 0x39 [0211.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.390] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netnat"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c7d5c2, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207eb5c8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.392] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0211.392] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", nBufferLength=0x3a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", lpFilePart=0x0) returned 0x39 [0211.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.393] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netqos"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c7e767, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207eb5c8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.393] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0211.393] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", nBufferLength=0x3f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", lpFilePart=0x0) returned 0x3e [0211.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.393] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netsecurity"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1d3e2ea, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.394] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0211.394] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", lpFilePart=0x0) returned 0x40 [0211.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.394] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netswitchteam"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dbbc19, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2081182e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.396] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0211.396] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", nBufferLength=0x3c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", lpFilePart=0x0) returned 0x3b [0211.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.396] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\nettcpip"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dbc877, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20837aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.396] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0211.396] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", nBufferLength=0x4d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", lpFilePart=0x0) returned 0x4c [0211.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.397] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networkconnectivitystatus"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e300dc, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20837aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.397] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0211.397] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", nBufferLength=0x45, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", lpFilePart=0x0) returned 0x44 [0211.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.397] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networktransition"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e30eea, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.398] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0211.398] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", lpFilePart=0x0) returned 0x36 [0211.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.398] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pki"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e319e4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.498] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0211.498] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", lpFilePart=0x0) returned 0x3c [0211.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.498] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pnpdevice"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e92e4b, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.499] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0211.499] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", nBufferLength=0x43, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", lpFilePart=0x0) returned 0x42 [0211.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.499] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\printmanagement"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e93bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x208aa1cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.500] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0211.500] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x4f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", lpFilePart=0x0) returned 0x4e [0211.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.500] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e950c4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.501] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0211.501] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", lpFilePart=0x0) returned 0x40 [0211.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.501] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdiagnostics"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1f64ff6, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.503] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0211.503] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x42, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", lpFilePart=0x0) returned 0x41 [0211.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.503] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psscheduledjob"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1f65404, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.505] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0211.505] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", nBufferLength=0x42, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", lpFilePart=0x0) returned 0x41 [0211.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.505] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\scheduledtasks"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb8b03, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.506] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0211.506] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", nBufferLength=0x3e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", lpFilePart=0x0) returned 0x3d [0211.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.506] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\secureboot"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb91fe, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.507] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0211.507] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", nBufferLength=0x3b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", lpFilePart=0x0) returned 0x3a [0211.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.507] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\storage"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb9d09, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20968dca, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.508] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0211.508] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", lpFilePart=0x0) returned 0x36 [0211.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.508] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\tls"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fba32e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20968dca, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.509] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0211.509] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x47, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", lpFilePart=0x0) returned 0x46 [0211.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.509] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\troubleshootingpack"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbaba9, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.510] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0211.510] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", lpFilePart=0x0) returned 0x48 [0211.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.510] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\trustedplatformmodule"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbbc28, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.510] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0211.510] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", lpFilePart=0x0) returned 0x36 [0211.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.510] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\uev"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e5be8c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1fbcd58, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe966970b, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.512] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0211.512] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", lpFilePart=0x0) returned 0x3c [0211.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.512] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\vpnclient"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbd4ae, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.512] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0211.513] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", lpFilePart=0x0) returned 0x37 [0211.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.513] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\wdac"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205dc90, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.514] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0211.514] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", nBufferLength=0x4b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", lpFilePart=0x0) returned 0x4a [0211.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.514] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsdeveloperlicense"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205e730, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.515] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0211.515] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", lpFilePart=0x0) returned 0x48 [0211.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.515] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowserrorreporting"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205efde, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.515] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0211.515] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", lpFilePart=0x0) returned 0x40 [0211.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0211.516] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsupdate"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205f3c7, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0211.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0211.516] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0211.516] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0211.517] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acb52e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7578690 [0211.517] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acb52e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.518] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psd1", cAlternateFileName="")) returned 1 [0211.518] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 1 [0211.518] FindNextFileW (in: hFindFile=0x7578690, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 0 [0211.518] FindClose (in: hFindFile=0x7578690 | out: hFindFile=0x7578690) returned 1 [0211.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0211.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0211.519] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0211.519] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0211.519] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0211.519] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0211.520] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0211.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0211.520] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x527599c | out: lpFileInformation=0x527599c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0211.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0211.522] CoCreateGuid (in: pguid=0x85de824 | out: pguid=0x85de824*(Data1=0xa7557a91, Data2=0xc185, Data3=0x4f31, Data4=([0]=0xa8, [1]=0x9a, [2]=0xeb, [3]=0x87, [4]=0xed, [5]=0xb5, [6]=0xd5, [7]=0x16))) returned 0x0 [0213.136] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x774 [0213.136] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x770 [0213.136] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x794 [0213.136] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x798 [0213.136] SetEvent (hEvent=0x798) returned 1 [0213.136] SetEvent (hEvent=0x774) returned 1 [0213.137] SetEvent (hEvent=0x770) returned 1 [0213.137] SetEvent (hEvent=0x794) returned 1 [0213.142] AmsiCloseSession () returned 0x3497830 [0213.144] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x79c [0213.145] SetThreadUILanguage (LangId=0x0) returned 0xdc0409 [0214.458] EtwEventActivityIdControl (in: ControlCode=0x3, ActivityId=0x85de4ec*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de4ec*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3a, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0214.458] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85de458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de458*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x39, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0214.458] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0x85de4dc*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3a, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0x85de4dc*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3a, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0214.849] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0214.851] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0214.851] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0214.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de2a4) returned 1 [0214.851] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de320 | out: lpFileInformation=0x85de320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0214.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de2a0) returned 1 [0214.852] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0215.552] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0215.553] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0215.553] CoTaskMemAlloc (cb=0x20c) returned 0x75fedb8 [0215.553] GetSystemDirectoryW (in: lpBuffer=0x75fedb8, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0215.553] CoTaskMemFree (pv=0x75fedb8) [0215.553] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0215.553] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0215.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85ddf08) returned 1 [0215.553] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x85ddf84 | out: lpFileInformation=0x85ddf84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1c22f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa1c22f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa1c22f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe840)) returned 1 [0215.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85ddf04) returned 1 [0215.554] GetSystemInfo (in: lpSystemInfo=0x85ddfb8 | out: lpSystemInfo=0x85ddfb8*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0215.555] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x85ddf48 | out: phkResult=0x85ddf48*=0x7a4) returned 0x0 [0215.556] RegQueryValueExW (in: hKey=0x7a4, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x85ddf64, lpData=0x0, lpcbData=0x85ddf60*=0x0 | out: lpType=0x85ddf64*=0x0, lpData=0x0, lpcbData=0x85ddf60*=0x0) returned 0x2 [0215.556] RegCloseKey (hKey=0x7a4) returned 0x0 [0215.576] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0215.576] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0215.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85ddec0) returned 1 [0215.576] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7a4 [0215.576] GetFileType (hFile=0x7a4) returned 0x1 [0215.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85ddebc) returned 1 [0215.576] GetFileType (hFile=0x7a4) returned 0x1 [0215.634] SetFilePointer (in: hFile=0x7a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x85ddefc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85ddefc*=0) returned 0x0 [0215.634] ReadFile (in: hFile=0x7a4, lpBuffer=0x529e71c, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85ddf28, lpOverlapped=0x0 | out: lpBuffer=0x529e71c*, lpNumberOfBytesRead=0x85ddf28*=0x983, lpOverlapped=0x0) returned 1 [0215.640] SetFilePointer (in: hFile=0x7a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x85ddefc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85ddefc*=0) returned 0x983 [0215.640] ReadFile (in: hFile=0x7a4, lpBuffer=0x529dc3f, nNumberOfBytesToRead=0x27d, lpNumberOfBytesRead=0x85ddf28, lpOverlapped=0x0 | out: lpBuffer=0x529dc3f*, lpNumberOfBytesRead=0x85ddf28*=0x0, lpOverlapped=0x0) returned 1 [0215.913] SetFilePointer (in: hFile=0x7a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x85ddefc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85ddefc*=0) returned 0x983 [0215.913] ReadFile (in: hFile=0x7a4, lpBuffer=0x5048fcc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85ddf28, lpOverlapped=0x0 | out: lpBuffer=0x5048fcc*, lpNumberOfBytesRead=0x85ddf28*=0x0, lpOverlapped=0x0) returned 1 [0215.914] CoTaskMemAlloc (cb=0x20c) returned 0x75fedb8 [0215.914] GetSystemDirectoryW (in: lpBuffer=0x75fedb8, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0215.914] CoTaskMemFree (pv=0x75fedb8) [0215.914] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0215.914] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0215.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dde5c) returned 1 [0215.914] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x85dded8 | out: lpFileInformation=0x85dded8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1c22f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa1c22f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa1c22f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe840)) returned 1 [0215.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dde58) returned 1 [0215.915] GetSystemInfo (in: lpSystemInfo=0x85ddf0c | out: lpSystemInfo=0x85ddf0c*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0215.915] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x85dde9c | out: phkResult=0x85dde9c*=0x7ac) returned 0x0 [0215.917] RegQueryValueExW (in: hKey=0x7ac, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x85ddeb8, lpData=0x0, lpcbData=0x85ddeb4*=0x0 | out: lpType=0x85ddeb8*=0x0, lpData=0x0, lpcbData=0x85ddeb4*=0x0) returned 0x2 [0215.917] RegCloseKey (hKey=0x7ac) returned 0x0 [0215.919] CloseHandle (hObject=0x7a4) returned 1 [0216.125] CoCreateGuid (in: pguid=0x85ddf8c | out: pguid=0x85ddf8c*(Data1=0x90de102f, Data2=0x5e9f, Data3=0x46b7, Data4=([0]=0xbc, [1]=0xe4, [2]=0x7d, [3]=0x57, [4]=0xd3, [5]=0xd8, [6]=0xbf, [7]=0x6e))) returned 0x0 [0216.187] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0216.187] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0216.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85ddc20) returned 1 [0216.187] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85ddc9c | out: lpFileInformation=0x85ddc9c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0216.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85ddc1c) returned 1 [0216.188] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0216.188] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0216.188] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0216.188] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0216.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85ddb94) returned 1 [0216.189] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85ddc10 | out: lpFileInformation=0x85ddc10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0216.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85ddb90) returned 1 [0216.189] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0216.189] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0216.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85ddb68) returned 1 [0216.189] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7a0 [0216.189] GetFileType (hFile=0x7a0) returned 0x1 [0216.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85ddb64) returned 1 [0216.189] GetFileType (hFile=0x7a0) returned 0x1 [0216.190] WTGetSignatureInfo () returned 0x0 [0216.623] CertDuplicateCertificateContext (pCertContext=0x1132f20) returned 0x1132f20 [0216.624] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85ddbcc | out: phkResult=0x85ddbcc*=0x7b4) returned 0x0 [0216.625] RegQueryValueExW (in: hKey=0x7b4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85ddbec, lpData=0x0, lpcbData=0x85ddbe8*=0x0 | out: lpType=0x85ddbec*=0x1, lpData=0x0, lpcbData=0x85ddbe8*=0x56) returned 0x0 [0216.683] RegQueryValueExW (in: hKey=0x7b4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85ddbec, lpData=0x5057f54, lpcbData=0x85ddbe8*=0x56 | out: lpType=0x85ddbec*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85ddbe8*=0x56) returned 0x0 [0216.683] RegCloseKey (hKey=0x7b4) returned 0x0 [0216.683] CoTaskMemAlloc (cb=0x10) returned 0x75e7d40 [0216.683] CoTaskMemAlloc (cb=0x30) returned 0x75f9600 [0216.684] WinVerifyTrust () returned 0x0 [0216.693] CoTaskMemFree (pv=0x75f9600) [0216.693] CoTaskMemFree (pv=0x75e7d40) [0216.693] CertFreeCertificateContext (pCertContext=0x1132f20) returned 1 [0216.693] CloseHandle (hObject=0x7a0) returned 1 [0216.694] AmsiOpenSession () returned 0x0 [0216.694] AmsiScanString () returned 0x80070015 [0216.961] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\en-US\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\en-us\\microsoft.powershell.utility.psd1")) returned 0xffffffff [0216.962] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\en\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\en\\microsoft.powershell.utility.psd1")) returned 0xffffffff [0217.145] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0217.145] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0217.145] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0217.145] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0217.337] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x64 [0217.337] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", nBufferLength=0x64, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x63 [0217.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd620) returned 1 [0217.338] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x85dd69c | out: lpFileInformation=0x85dd69c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0217.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd61c) returned 1 [0217.342] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0217.342] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Commands.Utility.dll\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.commands.utility.dll\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0217.346] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x85dd358, nSize=0xc3 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0xc2 [0217.348] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0217.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0217.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x51, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x50 [0217.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd428) returned 1 [0217.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x85dd4a4 | out: lpFileInformation=0x85dd4a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0217.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd424) returned 1 [0217.357] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0217.361] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\modules")) returned 0xffffffff [0217.435] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0217.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x57 [0217.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x57, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x56 [0217.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd428) returned 1 [0217.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x85dd4a4 | out: lpFileInformation=0x85dd4a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0217.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd424) returned 1 [0217.441] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0217.445] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules")) returned 0x10 [0217.446] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0217.447] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x59, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x58 [0217.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd428) returned 1 [0217.447] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x85dd4a4 | out: lpFileInformation=0x85dd4a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0217.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd424) returned 1 [0217.452] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0218.556] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0218.556] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0218.557] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0218.557] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0218.558] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0218.558] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0223.543] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1")) returned 0x20 [0223.543] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0223.544] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0223.544] CoTaskMemAlloc (cb=0x20c) returned 0x759e088 [0223.545] GetSystemDirectoryW (in: lpBuffer=0x759e088, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0223.546] CoTaskMemFree (pv=0x759e088) [0223.546] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0223.546] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0223.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd1a8) returned 1 [0223.546] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x85dd224 | out: lpFileInformation=0x85dd224*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1c22f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa1c22f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa1c22f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe840)) returned 1 [0223.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd1a4) returned 1 [0223.547] GetSystemInfo (in: lpSystemInfo=0x85dd258 | out: lpSystemInfo=0x85dd258*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0223.547] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x85dd1e8 | out: phkResult=0x85dd1e8*=0x26c) returned 0x0 [0223.557] RegQueryValueExW (in: hKey=0x26c, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x85dd204, lpData=0x0, lpcbData=0x85dd200*=0x0 | out: lpType=0x85dd204*=0x0, lpData=0x0, lpcbData=0x85dd200*=0x0) returned 0x2 [0223.557] RegCloseKey (hKey=0x26c) returned 0x0 [0223.557] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0223.558] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0223.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd1d4) returned 1 [0223.558] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x50f6dc0 | out: lpFileInformation=0x50f6dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0223.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd1d0) returned 1 [0223.559] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0223.559] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0223.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd194) returned 1 [0223.559] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x85dd210 | out: lpFileInformation=0x85dd210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0223.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd190) returned 1 [0223.559] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0223.560] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0223.560] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0223.560] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0223.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd108) returned 1 [0223.560] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x85dd184 | out: lpFileInformation=0x85dd184*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0223.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd104) returned 1 [0223.561] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0223.561] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0223.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd0dc) returned 1 [0223.561] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x26c [0223.561] GetFileType (hFile=0x26c) returned 0x1 [0223.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd0d8) returned 1 [0223.561] GetFileType (hFile=0x26c) returned 0x1 [0223.562] WTGetSignatureInfo () returned 0x0 [0223.859] CertDuplicateCertificateContext (pCertContext=0x11331a0) returned 0x11331a0 [0223.860] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85dd140 | out: phkResult=0x85dd140*=0x7c8) returned 0x0 [0223.861] RegQueryValueExW (in: hKey=0x7c8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85dd160, lpData=0x0, lpcbData=0x85dd15c*=0x0 | out: lpType=0x85dd160*=0x1, lpData=0x0, lpcbData=0x85dd15c*=0x56) returned 0x0 [0223.861] RegQueryValueExW (in: hKey=0x7c8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85dd160, lpData=0x50f72e4, lpcbData=0x85dd15c*=0x56 | out: lpType=0x85dd160*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85dd15c*=0x56) returned 0x0 [0223.861] RegCloseKey (hKey=0x7c8) returned 0x0 [0223.861] CoTaskMemAlloc (cb=0x10) returned 0x75e8328 [0223.861] CoTaskMemAlloc (cb=0x30) returned 0x75f9280 [0223.861] WinVerifyTrust () returned 0x0 [0223.867] CoTaskMemFree (pv=0x75f9280) [0223.868] CoTaskMemFree (pv=0x75e8328) [0223.868] CertFreeCertificateContext (pCertContext=0x11331a0) returned 1 [0223.868] CloseHandle (hObject=0x26c) returned 1 [0223.868] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0223.868] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0223.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd198) returned 1 [0223.869] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x26c [0223.869] GetFileType (hFile=0x26c) returned 0x1 [0223.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd194) returned 1 [0223.869] GetFileType (hFile=0x26c) returned 0x1 [0223.869] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x0 [0223.869] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x1000, lpOverlapped=0x0) returned 1 [0223.870] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x1000 [0223.870] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x1000, lpOverlapped=0x0) returned 1 [0223.871] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x2000 [0223.871] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x1000, lpOverlapped=0x0) returned 1 [0223.871] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x3000 [0223.871] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x1000, lpOverlapped=0x0) returned 1 [0223.872] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x4000 [0223.872] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x1000, lpOverlapped=0x0) returned 1 [0223.872] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x5000 [0223.872] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x1000, lpOverlapped=0x0) returned 1 [0223.873] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x6000 [0223.873] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x1000, lpOverlapped=0x0) returned 1 [0223.873] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x7000 [0223.874] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x780, lpOverlapped=0x0) returned 1 [0223.874] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x7780 [0223.874] ReadFile (in: hFile=0x26c, lpBuffer=0x50f79fc, nNumberOfBytesToRead=0x80, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f79fc*, lpNumberOfBytesRead=0x85dd200*=0x0, lpOverlapped=0x0) returned 1 [0223.874] SetFilePointer (in: hFile=0x26c, lDistanceToMove=0, lpDistanceToMoveHigh=0x85dd1d4*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85dd1d4*=0) returned 0x7780 [0223.874] ReadFile (in: hFile=0x26c, lpBuffer=0x50f82dc, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85dd200, lpOverlapped=0x0 | out: lpBuffer=0x50f82dc*, lpNumberOfBytesRead=0x85dd200*=0x0, lpOverlapped=0x0) returned 1 [0223.875] CoTaskMemAlloc (cb=0x20c) returned 0x759d398 [0223.875] GetSystemDirectoryW (in: lpBuffer=0x759d398, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0223.875] CoTaskMemFree (pv=0x759d398) [0223.875] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0223.875] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0223.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd134) returned 1 [0223.875] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x85dd1b0 | out: lpFileInformation=0x85dd1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fa1c22f, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6fa1c22f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6fa1c22f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe840)) returned 1 [0223.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd130) returned 1 [0223.876] GetSystemInfo (in: lpSystemInfo=0x85dd1e4 | out: lpSystemInfo=0x85dd1e4*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0223.876] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x85dd174 | out: phkResult=0x85dd174*=0x618) returned 0x0 [0223.931] RegQueryValueExW (in: hKey=0x618, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x85dd190, lpData=0x0, lpcbData=0x85dd18c*=0x0 | out: lpType=0x85dd190*=0x0, lpData=0x0, lpcbData=0x85dd18c*=0x0) returned 0x2 [0223.931] RegCloseKey (hKey=0x618) returned 0x0 [0223.931] CloseHandle (hObject=0x26c) returned 1 [0224.517] CoCreateGuid (in: pguid=0x85dd2a8 | out: pguid=0x85dd2a8*(Data1=0x1a0bc24e, Data2=0xad44, Data3=0x4da4, Data4=([0]=0xad, [1]=0x26, [2]=0xe4, [3]=0x1c, [4]=0x37, [5]=0x2f, [6]=0xb6, [7]=0x4a))) returned 0x0 [0224.518] GetCurrentProcess () returned 0xffffffff [0224.518] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x85dd270 | out: TokenHandle=0x85dd270*=0x26c) returned 1 [0224.519] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x85dd274 | out: TokenInformation=0x0, ReturnLength=0x85dd274) returned 0 [0224.519] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x79ff9c8 [0224.519] GetTokenInformation (in: TokenHandle=0x26c, TokenInformationClass=0x8, TokenInformation=0x79ff9c8, TokenInformationLength=0x4, ReturnLength=0x85dd274 | out: TokenInformation=0x79ff9c8, ReturnLength=0x85dd274) returned 1 [0224.519] LocalFree (hMem=0x79ff9c8) returned 0x0 [0224.520] DuplicateTokenEx (in: hExistingToken=0x26c, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x85dd27c | out: phNewToken=0x85dd27c*=0x618) returned 1 [0224.520] CheckTokenMembership (in: TokenHandle=0x618, SidToCheck=0x519895c*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x85dd28c | out: IsMember=0x85dd28c) returned 1 [0224.520] CloseHandle (hObject=0x618) returned 1 [0224.527] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0224.527] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0224.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dcf4c) returned 1 [0224.527] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x85dcfc8 | out: lpFileInformation=0x85dcfc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0224.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dcf48) returned 1 [0224.528] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0224.528] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0224.528] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0224.528] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0224.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dcec0) returned 1 [0224.528] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x85dcf3c | out: lpFileInformation=0x85dcf3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0224.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dcebc) returned 1 [0224.529] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0224.529] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0224.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dce94) returned 1 [0224.529] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0224.529] GetFileType (hFile=0x618) returned 0x1 [0224.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dce90) returned 1 [0224.529] GetFileType (hFile=0x618) returned 0x1 [0224.529] WTGetSignatureInfo () returned 0x0 [0224.770] CertDuplicateCertificateContext (pCertContext=0x1133060) returned 0x1133060 [0224.770] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85dcef8 | out: phkResult=0x85dcef8*=0x7bc) returned 0x0 [0224.771] RegQueryValueExW (in: hKey=0x7bc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85dcf18, lpData=0x0, lpcbData=0x85dcf14*=0x0 | out: lpType=0x85dcf18*=0x1, lpData=0x0, lpcbData=0x85dcf14*=0x56) returned 0x0 [0224.771] RegQueryValueExW (in: hKey=0x7bc, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85dcf18, lpData=0x51a1ab8, lpcbData=0x85dcf14*=0x56 | out: lpType=0x85dcf18*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85dcf14*=0x56) returned 0x0 [0224.772] RegCloseKey (hKey=0x7bc) returned 0x0 [0224.772] CoTaskMemAlloc (cb=0x10) returned 0x75e8430 [0224.772] CoTaskMemAlloc (cb=0x30) returned 0x75f9408 [0224.772] WinVerifyTrust () returned 0x0 [0224.775] CoTaskMemFree (pv=0x75f9408) [0224.776] CoTaskMemFree (pv=0x75e8430) [0224.776] CertFreeCertificateContext (pCertContext=0x1133060) returned 1 [0224.776] CloseHandle (hObject=0x618) returned 1 [0224.776] AmsiScanString () returned 0x80070015 [0224.933] CoCreateGuid (in: pguid=0x85dcef4 | out: pguid=0x85dcef4*(Data1=0x51fa0159, Data2=0x15da, Data3=0x48ff, Data4=([0]=0x94, [1]=0x8, [2]=0x3a, [3]=0xbd, [4]=0xfc, [5]=0x3e, [6]=0x64, [7]=0xd7))) returned 0x0 [0224.946] CoCreateGuid (in: pguid=0x85dcef4 | out: pguid=0x85dcef4*(Data1=0xb4d0585a, Data2=0xeff2, Data3=0x4b1e, Data4=([0]=0xb3, [1]=0xb0, [2]=0xde, [3]=0xd6, [4]=0xc7, [5]=0x20, [6]=0xcd, [7]=0x76))) returned 0x0 [0224.954] CoCreateGuid (in: pguid=0x85dcef4 | out: pguid=0x85dcef4*(Data1=0x190aca1c, Data2=0x2cc3, Data3=0x4a22, Data4=([0]=0xac, [1]=0x1d, [2]=0x39, [3]=0x2, [4]=0xa9, [5]=0xca, [6]=0xae, [7]=0x1))) returned 0x0 [0224.954] CoCreateGuid (in: pguid=0x85dcef4 | out: pguid=0x85dcef4*(Data1=0xbf320254, Data2=0xc274, Data3=0x4e0e, Data4=([0]=0x84, [1]=0x7f, [2]=0xf2, [3]=0xa6, [4]=0xeb, [5]=0xc4, [6]=0xcb, [7]=0x5))) returned 0x0 [0225.026] CoCreateGuid (in: pguid=0x85dcef4 | out: pguid=0x85dcef4*(Data1=0x4fd31aa2, Data2=0x86e7, Data3=0x423e, Data4=([0]=0xb7, [1]=0x6d, [2]=0xba, [3]=0xe2, [4]=0x35, [5]=0x6d, [6]=0xaa, [7]=0x67))) returned 0x0 [0225.026] CoCreateGuid (in: pguid=0x85dcef4 | out: pguid=0x85dcef4*(Data1=0xc7634971, Data2=0xbf90, Data3=0x4210, Data4=([0]=0x89, [1]=0x22, [2]=0x29, [3]=0xaa, [4]=0x4a, [5]=0x25, [6]=0xa8, [7]=0xcf))) returned 0x0 [0225.243] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x26c) returned 0x0 [0225.244] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0225.244] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x51c4b80, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0225.244] RegCloseKey (hKey=0x26c) returned 0x0 [0225.245] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x26c) returned 0x0 [0225.246] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0225.246] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x51c4e94, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0225.246] RegCloseKey (hKey=0x26c) returned 0x0 [0225.247] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x26c) returned 0x0 [0225.248] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0225.248] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x51c5190, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0225.248] RegCloseKey (hKey=0x26c) returned 0x0 [0225.249] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x26c) returned 0x0 [0225.250] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0225.250] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x51c5498, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0225.250] RegCloseKey (hKey=0x26c) returned 0x0 [0225.251] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x26c) returned 0x0 [0225.252] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0225.252] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x51c57ac, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0225.252] RegCloseKey (hKey=0x26c) returned 0x0 [0225.253] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x26c) returned 0x0 [0225.254] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0225.254] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x51c5ac0, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0225.254] RegCloseKey (hKey=0x26c) returned 0x0 [0225.254] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x26c) returned 0x0 [0225.255] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0225.255] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x51c5dbc, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0225.255] RegCloseKey (hKey=0x26c) returned 0x0 [0225.257] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de338 | out: phkResult=0x85de338*=0x26c) returned 0x0 [0225.258] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de358, lpData=0x0, lpcbData=0x85de354*=0x0 | out: lpType=0x85de358*=0x1, lpData=0x0, lpcbData=0x85de354*=0x56) returned 0x0 [0225.258] RegQueryValueExW (in: hKey=0x26c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de358, lpData=0x51c6104, lpcbData=0x85de354*=0x56 | out: lpType=0x85de358*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de354*=0x56) returned 0x0 [0225.258] RegCloseKey (hKey=0x26c) returned 0x0 [0225.559] CoTaskMemAlloc (cb=0x20c) returned 0x759d398 [0225.559] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x759d398 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0225.561] CoTaskMemFree (pv=0x759d398) [0225.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0225.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0226.585] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85de47c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de47c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3a, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0226.588] SetEvent (hEvent=0x79c) returned 1 [0226.589] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x85de68c*=0x79c, lpdwindex=0x85de4ac | out: lpdwindex=0x85de4ac) returned 0x0 [0226.790] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x85de620, nSize=0xc3 | out: lpBuffer="࡝现࡝࡝࡝ңȀ澳࡝ᆪ现䷜濫ĉ") returned 0x0 [0226.795] GetStdHandle (nStdHandle=0xfffffff4) returned 0x94 [0226.795] GetFileType (hFile=0x94) returned 0x2 [0226.795] GetConsoleMode (in: hConsoleHandle=0x94, lpMode=0x85de7c0 | out: lpMode=0x85de7c0) returned 1 [0226.982] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x624, lpConsoleScreenBufferInfo=0x85de780 | out: lpConsoleScreenBufferInfo=0x85de780) returned 1 [0227.157] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x624, lpConsoleScreenBufferInfo=0x85de780 | out: lpConsoleScreenBufferInfo=0x85de780) returned 1 [0227.794] EtwEventActivityIdControl (in: ControlCode=0x3, ActivityId=0x85dea4c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85dea4c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3f, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0227.794] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85de9b8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de9b8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3a, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0227.794] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0x85dea3c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3f, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0x85dea3c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3f, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0228.020] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x7a0 [0228.020] CoWaitForMultipleHandles (dwFlags=0x2, dwTimeout=0x3e8, cHandles=0x1, pHandles=0x85de904*=0x7a0, lpdwindex=0x85de724) [0229.068] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85de9dc*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de9dc*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3f, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0229.076] CloseHandle (hObject=0x7a0) returned 1 [0229.076] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x85de6e0, nSize=0xc3 | out: lpBuffer="") returned 0x0 [0229.077] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x85de5fc, nSize=0xc3 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0229.080] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x85de5e8, nSize=0xc3 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 0x3a [0229.082] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x10c3ff0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0229.089] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x85de5f0, nSize=0xc3 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 0x3a [0229.089] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0229.089] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x24, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0229.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0229.090] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath" (normalized: "c:\\programdata\\oracle\\java\\javapath"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0229.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0229.091] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0229.091] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x24, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0229.091] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\Remove-Item.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0229.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0229.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0229.093] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0229.093] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0229.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0229.093] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ec28c54, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xebb5ab66, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xebb5ab66, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1 [0229.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0229.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0229.094] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0229.094] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0229.094] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\Remove-Item.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0229.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0229.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0229.095] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0229.096] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0xb, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS", lpFilePart=0x0) returned 0xa [0229.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0229.096] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0229.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0229.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0229.097] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0229.097] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0xb, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS", lpFilePart=0x0) returned 0xa [0229.097] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\Remove-Item.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0229.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0229.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0229.098] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0229.098] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0229.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0229.099] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem" (normalized: "c:\\windows\\system32\\wbem"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb288124d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb288124d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1 [0229.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0229.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0229.099] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0229.099] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0229.100] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\Remove-Item.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0229.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0229.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0229.101] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0229.101] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0229.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0229.101] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x172cbef, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8cfff4c6, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0229.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0229.101] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0229.102] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0229.102] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\Remove-Item.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0229.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0229.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0229.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0229.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x34, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0229.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de738) returned 1 [0229.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windowsapps"), fInfoLevelId=0x0, lpFileInformation=0x85de7b4 | out: lpFileInformation=0x85de7b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de734) returned 1 [0229.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7b4) returned 1 [0229.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0229.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x34, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0229.104] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\Remove-Item.*", lpFindFileData=0x85de4dc | out: lpFindFileData=0x85de4dc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0229.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de754) returned 1 [0229.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de760) returned 1 [0229.110] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x85de654, nSize=0xc3 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0xc2 [0229.113] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0229.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0229.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x2b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x2a [0229.114] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107e178 [0229.115] FindNextFileW (in: hFindFile=0x107e178, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.115] FindNextFileW (in: hFindFile=0x107e178, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0229.116] FindNextFileW (in: hFindFile=0x107e178, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0229.116] FindNextFileW (in: hFindFile=0x107e178, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0229.193] FindNextFileW (in: hFindFile=0x107e178, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0229.193] FindNextFileW (in: hFindFile=0x107e178, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 1 [0229.194] FindNextFileW (in: hFindFile=0x107e178, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.194] FindClose (in: hFindFile=0x107e178 | out: hFindFile=0x107e178) returned 1 [0229.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.195] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0229.195] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0229.195] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0229.196] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0229.196] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0229.196] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0229.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0229.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x55, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x54 [0229.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0229.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0229.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0229.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x32, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x31 [0229.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester" (normalized: "c:\\program files\\windowspowershell\\modules\\pester"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0229.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0229.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.200] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0229.200] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x36, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", lpFilePart=0x0) returned 0x35 [0229.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0229.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x55, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x54 [0229.202] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107e038 [0229.202] FindNextFileW (in: hFindFile=0x107e038, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.203] FindNextFileW (in: hFindFile=0x107e038, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0229.203] FindNextFileW (in: hFindFile=0x107e038, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.203] FindClose (in: hFindFile=0x107e038 | out: hFindFile=0x107e038) returned 1 [0229.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0229.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0229.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0229.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0229.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0229.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0229.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0229.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51e7728 | out: lpFileInformation=0x51e7728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0229.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.206] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psd1")) returned 0xffffffff [0229.206] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psm1")) returned 0xffffffff [0229.206] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.cdxml")) returned 0xffffffff [0229.206] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.xaml")) returned 0xffffffff [0229.206] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.ni.dll")) returned 0xffffffff [0229.206] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.dll")) returned 0xffffffff [0229.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0229.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0229.207] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107e138 [0229.207] FindNextFileW (in: hFindFile=0x107e138, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.208] FindNextFileW (in: hFindFile=0x107e138, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb512ac95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0229.208] FindNextFileW (in: hFindFile=0x107e138, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.209] FindClose (in: hFindFile=0x107e138 | out: hFindFile=0x107e138) returned 1 [0229.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0229.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0229.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0229.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0229.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0229.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0229.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0229.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51e9a40 | out: lpFileInformation=0x51e9a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0229.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.211] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0229.211] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0229.211] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0229.212] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0229.212] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0229.212] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0229.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0229.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x32, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x31 [0229.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107daf8 [0229.213] FindNextFileW (in: hFindFile=0x107daf8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.213] FindNextFileW (in: hFindFile=0x107daf8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0229.214] FindNextFileW (in: hFindFile=0x107daf8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0229.214] FindNextFileW (in: hFindFile=0x107daf8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.214] FindClose (in: hFindFile=0x107daf8 | out: hFindFile=0x107daf8) returned 1 [0229.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0229.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0229.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0229.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0229.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0229.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0229.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0229.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51eb594 | out: lpFileInformation=0x51eb594*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0229.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0229.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0229.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0229.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0229.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0229.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0229.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0229.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51eb844 | out: lpFileInformation=0x51eb844*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0229.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.218] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.psd1")) returned 0xffffffff [0229.218] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.psm1")) returned 0xffffffff [0229.218] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.cdxml")) returned 0xffffffff [0229.218] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.xaml")) returned 0xffffffff [0229.218] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.ni.dll")) returned 0xffffffff [0229.219] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.dll")) returned 0xffffffff [0229.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0229.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0229.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107db78 [0229.220] FindNextFileW (in: hFindFile=0x107db78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.220] FindNextFileW (in: hFindFile=0x107db78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53ec4f8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0229.220] FindNextFileW (in: hFindFile=0x107db78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.220] FindClose (in: hFindFile=0x107db78 | out: hFindFile=0x107db78) returned 1 [0229.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0229.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0229.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0229.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0229.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0229.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0229.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0229.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51ecf00 | out: lpFileInformation=0x51ecf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0229.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.222] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0229.222] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0229.222] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0229.222] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0229.222] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0229.223] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0229.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0229.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x36, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", lpFilePart=0x0) returned 0x35 [0229.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107de38 [0229.224] FindNextFileW (in: hFindFile=0x107de38, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.225] FindNextFileW (in: hFindFile=0x107de38, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1", cAlternateFileName="")) returned 1 [0229.225] FindNextFileW (in: hFindFile=0x107de38, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb54d73e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 1 [0229.225] FindNextFileW (in: hFindFile=0x107de38, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.225] FindClose (in: hFindFile=0x107de38 | out: hFindFile=0x107de38) returned 1 [0229.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0229.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6)) returned 1 [0229.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0229.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0229.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51ee8f4 | out: lpFileInformation=0x51ee8f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6)) returned 1 [0229.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0229.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.228] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0229.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0229.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0229.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.229] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51eeb4c | out: lpFileInformation=0x51eeb4c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0229.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.229] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.psd1")) returned 0xffffffff [0229.229] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.psm1")) returned 0xffffffff [0229.230] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.cdxml")) returned 0xffffffff [0229.230] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.xaml")) returned 0xffffffff [0229.230] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.ni.dll")) returned 0xffffffff [0229.230] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.dll")) returned 0xffffffff [0229.234] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\modules")) returned 0xffffffff [0229.320] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0229.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0229.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", nBufferLength=0x31, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x30 [0229.322] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107e0f8 [0229.323] FindNextFileW (in: hFindFile=0x107e0f8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e250, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.323] FindNextFileW (in: hFindFile=0x107e0f8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0229.324] FindNextFileW (in: hFindFile=0x107e0f8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0229.324] FindNextFileW (in: hFindFile=0x107e0f8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0229.324] FindNextFileW (in: hFindFile=0x107e0f8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0229.325] FindNextFileW (in: hFindFile=0x107e0f8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.325] FindClose (in: hFindFile=0x107e0f8 | out: hFindFile=0x107e0f8) returned 1 [0229.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.325] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0229.326] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0229.326] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0229.326] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0229.326] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0229.327] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0229.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0229.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x5b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x5a [0229.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0229.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0229.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0229.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x37 [0229.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0229.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0229.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5b [0229.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x5b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x5a [0229.331] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107dcb8 [0229.331] FindNextFileW (in: hFindFile=0x107dcb8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65e8f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c48de1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.332] FindNextFileW (in: hFindFile=0x107dcb8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c48de1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc70c3d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0229.332] FindNextFileW (in: hFindFile=0x107dcb8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.333] FindClose (in: hFindFile=0x107dcb8 | out: hFindFile=0x107dcb8) returned 1 [0229.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x90 [0229.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x90, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x8f [0229.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0229.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x90 [0229.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x90, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x8f [0229.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x90 [0229.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x90, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x8f [0229.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51f98d4 | out: lpFileInformation=0x51f98d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97de4ff6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97de4ff6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97de4ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0229.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.354] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psd1")) returned 0xffffffff [0229.354] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psm1")) returned 0xffffffff [0229.354] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.cdxml")) returned 0xffffffff [0229.354] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.xaml")) returned 0xffffffff [0229.355] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.ni.dll")) returned 0xffffffff [0229.355] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.dll")) returned 0xffffffff [0229.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0229.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x43, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x42 [0229.355] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107de78 [0229.356] FindNextFileW (in: hFindFile=0x107de78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc717ae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.356] FindNextFileW (in: hFindFile=0x107de78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc718a55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0229.357] FindNextFileW (in: hFindFile=0x107de78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.357] FindClose (in: hFindFile=0x107de78 | out: hFindFile=0x107de78) returned 1 [0229.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0229.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0229.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0229.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0229.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0229.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x62 [0229.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x62, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x61 [0229.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51fbd18 | out: lpFileInformation=0x51fbd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7a67f5, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5e5ed2e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5e5ed2e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0229.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.359] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0229.359] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0229.359] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0229.360] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0229.360] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0229.360] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0229.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0229.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x37 [0229.360] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107e038 [0229.361] FindNextFileW (in: hFindFile=0x107e038, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4698376a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4698376a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.361] FindNextFileW (in: hFindFile=0x107e038, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbc7fefb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x34a924f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0229.362] FindNextFileW (in: hFindFile=0x107e038, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc8ab4af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7cca5f, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0229.362] FindNextFileW (in: hFindFile=0x107e038, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.362] FindClose (in: hFindFile=0x107e038 | out: hFindFile=0x107e038) returned 1 [0229.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0229.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0229.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0229.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0229.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51fd9b0 | out: lpFileInformation=0x51fd9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9876e9c4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9876e9c4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9876e9c4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0229.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0229.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0229.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0229.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x49 [0229.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51fdbf0 | out: lpFileInformation=0x51fdbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x511551ea, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x511551ea, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x511551ea, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0229.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.460] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.psd1")) returned 0xffffffff [0229.461] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.psm1")) returned 0xffffffff [0229.461] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.cdxml")) returned 0xffffffff [0229.461] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.xaml")) returned 0xffffffff [0229.461] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.ni.dll")) returned 0xffffffff [0229.462] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\Pester.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\pester.dll")) returned 0xffffffff [0229.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0229.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x3f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x3e [0229.462] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107e0b8 [0229.462] FindNextFileW (in: hFindFile=0x107e0b8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc9fecb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.463] FindNextFileW (in: hFindFile=0x107e0b8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbca000ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0229.463] FindNextFileW (in: hFindFile=0x107e0b8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.464] FindClose (in: hFindFile=0x107e0b8 | out: hFindFile=0x107e0b8) returned 1 [0229.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0229.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0229.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de778) returned 1 [0229.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de7f4 | out: lpFileInformation=0x85de7f4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a83f191, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0229.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de774) returned 1 [0229.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0229.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0229.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0229.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x5a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x59 [0229.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x51ff3d8 | out: lpFileInformation=0x51ff3d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a83f191, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0229.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.466] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0229.466] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0229.466] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0229.466] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0229.466] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0229.467] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0229.471] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules")) returned 0x10 [0229.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.472] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0229.472] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x33, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpFilePart=0x0) returned 0x32 [0229.473] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x55ba8b37, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x55ba8b37, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107da78 [0229.473] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x55ba8b37, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x55ba8b37, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.475] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e35c2e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1902eb1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe9611c78, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppLocker", cAlternateFileName="APPLOC~1")) returned 1 [0229.475] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e35c2e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x197a24f, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x76586f17, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvClient", cAlternateFileName="APPVCL~1")) returned 1 [0229.476] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197bc54, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Appx", cAlternateFileName="")) returned 1 [0229.476] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197c4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer", cAlternateFileName="BITSTR~1")) returned 1 [0229.477] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e5be8c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x197cd93, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe966970b, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BranchCache", cAlternateFileName="BRANCH~1")) returned 1 [0229.477] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197d5fb, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets", cAlternateFileName="CIMCMD~1")) returned 1 [0229.477] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19ea3b1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20706767, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectAccessClientComponents", cAlternateFileName="DIRECT~1")) returned 1 [0229.478] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19eb58e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8cfff4c6, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dism", cAlternateFileName="")) returned 1 [0229.478] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19ec84e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20706767, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DnsClient", cAlternateFileName="DNSCLI~1")) returned 1 [0229.479] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a636cb, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventTracingManagement", cAlternateFileName="EVENTT~1")) returned 1 [0229.479] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a63ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="International", cAlternateFileName="INTERN~1")) returned 1 [0229.479] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a648ba, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI", cAlternateFileName="")) returned 1 [0229.479] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a65091, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISE", cAlternateFileName="")) returned 1 [0229.480] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a65832, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kds", cAlternateFileName="")) returned 1 [0229.480] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a6609c, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive", cAlternateFileName="MICROS~1.ARC")) returned 1 [0229.480] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a67503, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0229.481] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a67e99, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host", cAlternateFileName="MICROS~1.HOS")) returned 1 [0229.481] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a686f1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management", cAlternateFileName="MICROS~1.MAN")) returned 1 [0229.482] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1ac9e27, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils", cAlternateFileName="MICROS~1.ODA")) returned 1 [0229.482] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acae81, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security", cAlternateFileName="MICROS~1.SEC")) returned 1 [0229.482] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acb52e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility", cAlternateFileName="MICROS~1.UTI")) returned 1 [0229.483] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acc005, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WSMan.Management", cAlternateFileName="MICROS~2.MAN")) returned 1 [0229.483] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acdc29, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsDtc", cAlternateFileName="")) returned 1 [0229.483] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20c0ce20, ftCreationTime.dwHighDateTime=0x1d32773, ftLastAccessTime.dwLowDateTime=0x243555cf, ftLastAccessTime.dwHighDateTime=0x1d32773, ftLastWriteTime.dwLowDateTime=0x243555cf, ftLastWriteTime.dwHighDateTime=0x1d32773, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMQ", cAlternateFileName="")) returned 1 [0229.484] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acff90, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2079f100, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetAdapter", cAlternateFileName="NETADA~1")) returned 1 [0229.484] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1bb671a, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2079f100, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetConnection", cAlternateFileName="NETCON~1")) returned 1 [0229.485] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1bb70fa, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207c536a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetEventPacketCapture", cAlternateFileName="NETEVE~1")) returned 1 [0229.485] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c2fdb4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207c536a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetLbfo", cAlternateFileName="")) returned 1 [0229.485] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c7d5c2, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207eb5c8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetNat", cAlternateFileName="")) returned 1 [0229.486] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c7e767, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207eb5c8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetQos", cAlternateFileName="")) returned 1 [0229.486] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1d3e2ea, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetSecurity", cAlternateFileName="NETSEC~1")) returned 1 [0229.486] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dbbc19, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2081182e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetSwitchTeam", cAlternateFileName="NETSWI~1")) returned 1 [0229.487] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dbc877, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20837aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetTCPIP", cAlternateFileName="")) returned 1 [0229.488] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e300dc, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20837aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkConnectivityStatus", cAlternateFileName="NETWOR~1")) returned 1 [0229.488] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e30eea, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkTransition", cAlternateFileName="NETWOR~2")) returned 1 [0229.488] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e319e4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PKI", cAlternateFileName="")) returned 1 [0229.489] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e92e4b, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PnpDevice", cAlternateFileName="PNPDEV~1")) returned 1 [0229.489] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e93bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x208aa1cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrintManagement", cAlternateFileName="PRINTM~1")) returned 1 [0229.490] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e950c4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDesiredStateConfiguration", cAlternateFileName="PSDESI~1")) returned 1 [0229.490] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1f64ff6, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDiagnostics", cAlternateFileName="PSDIAG~1")) returned 1 [0229.491] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1f65404, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSScheduledJob", cAlternateFileName="PSSCHE~1")) returned 1 [0229.491] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb8b03, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScheduledTasks", cAlternateFileName="SCHEDU~1")) returned 1 [0229.491] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb91fe, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecureBoot", cAlternateFileName="SECURE~1")) returned 1 [0229.492] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb9d09, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20968dca, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Storage", cAlternateFileName="")) returned 1 [0229.492] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fba32e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20968dca, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLS", cAlternateFileName="")) returned 1 [0229.493] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbaba9, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TroubleshootingPack", cAlternateFileName="TROUBL~1")) returned 1 [0229.493] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbbc28, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrustedPlatformModule", cAlternateFileName="TRUSTE~1")) returned 1 [0229.493] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e5be8c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1fbcd58, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe966970b, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UEV", cAlternateFileName="")) returned 1 [0229.494] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbd4ae, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VpnClient", cAlternateFileName="VPNCLI~1")) returned 1 [0229.494] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205dc90, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wdac", cAlternateFileName="")) returned 1 [0229.494] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205e730, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsDeveloperLicense", cAlternateFileName="WINDOW~1")) returned 1 [0229.495] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205efde, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsErrorReporting", cAlternateFileName="WINDOW~2")) returned 1 [0229.495] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205f3c7, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate", cAlternateFileName="WINDOW~3")) returned 1 [0229.495] FindNextFileW (in: hFindFile=0x107da78, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.496] FindClose (in: hFindFile=0x107da78 | out: hFindFile=0x107da78) returned 1 [0229.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.496] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.psd1")) returned 0xffffffff [0229.497] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.psm1")) returned 0xffffffff [0229.497] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.cdxml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.cdxml")) returned 0xffffffff [0229.497] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.xaml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.xaml")) returned 0xffffffff [0229.497] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.ni.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.ni.dll")) returned 0xffffffff [0229.498] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.dll")) returned 0xffffffff [0229.498] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0229.498] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", lpFilePart=0x0) returned 0x3c [0229.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.498] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\applocker"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e35c2e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1902eb1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe9611c78, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.499] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0229.499] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", nBufferLength=0x3e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", lpFilePart=0x0) returned 0x3d [0229.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.499] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appvclient"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e35c2e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x197a24f, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x76586f17, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.499] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0229.500] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", lpFilePart=0x0) returned 0x37 [0229.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.500] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appx"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197bc54, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.501] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0229.501] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0229.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.501] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\bitstransfer"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197c4d1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.502] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0229.502] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", nBufferLength=0x3f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", lpFilePart=0x0) returned 0x3e [0229.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.502] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\branchcache"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e5be8c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x197cd93, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe966970b, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.502] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0229.503] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x3e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", lpFilePart=0x0) returned 0x3d [0229.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.503] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\cimcmdlets"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x197d5fb, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x206e0505, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.503] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0229.503] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", lpFilePart=0x0) returned 0x4f [0229.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.504] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\directaccessclientcomponents"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19ea3b1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20706767, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.504] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0229.504] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", lpFilePart=0x0) returned 0x37 [0229.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.505] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dism"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19eb58e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8cfff4c6, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.505] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0229.505] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", lpFilePart=0x0) returned 0x3c [0229.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.506] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dnsclient"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x19ec84e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20706767, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.506] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0229.506] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", nBufferLength=0x4a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", lpFilePart=0x0) returned 0x49 [0229.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.506] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\eventtracingmanagement"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a636cb, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.646] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0229.647] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", lpFilePart=0x0) returned 0x40 [0229.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.647] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\international"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a63ff3, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.647] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0229.647] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", nBufferLength=0x39, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", lpFilePart=0x0) returned 0x38 [0229.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.648] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\iscsi"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a648ba, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.648] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0229.648] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", lpFilePart=0x0) returned 0x36 [0229.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.648] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\ise"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1856002a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a65091, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.649] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0229.649] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", lpFilePart=0x0) returned 0x36 [0229.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.649] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\kds"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a65832, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.650] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0229.650] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", lpFilePart=0x0) returned 0x4f [0229.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.650] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a6609c, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.651] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0229.651] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", lpFilePart=0x0) returned 0x53 [0229.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.651] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a67503, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.652] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0229.652] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x4d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", lpFilePart=0x0) returned 0x4c [0229.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.652] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a67e99, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.652] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0229.653] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0229.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.653] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a686f1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.653] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0229.653] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x53, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", lpFilePart=0x0) returned 0x52 [0229.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.654] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1ac9e27, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.654] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0229.654] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0229.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.655] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acae81, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.655] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0229.655] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0229.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.655] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acb52e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.656] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0229.656] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x4e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", lpFilePart=0x0) returned 0x4d [0229.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.656] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acc005, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.657] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0229.657] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", nBufferLength=0x39, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", lpFilePart=0x0) returned 0x38 [0229.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.657] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msdtc"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acdc29, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.658] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0229.658] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", lpFilePart=0x0) returned 0x37 [0229.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.658] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msmq"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20c0ce20, ftCreationTime.dwHighDateTime=0x1d32773, ftLastAccessTime.dwLowDateTime=0x243555cf, ftLastAccessTime.dwHighDateTime=0x1d32773, ftLastWriteTime.dwLowDateTime=0x243555cf, ftLastWriteTime.dwHighDateTime=0x1d32773, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.659] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0229.659] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", nBufferLength=0x3e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", lpFilePart=0x0) returned 0x3d [0229.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.659] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netadapter"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acff90, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2079f100, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0229.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.659] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0229.660] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", lpFilePart=0x0) returned 0x40 [0229.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.660] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netconnection"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1bb671a, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2079f100, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.660] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0229.660] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", lpFilePart=0x0) returned 0x48 [0229.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.661] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\neteventpacketcapture"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1bb70fa, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207c536a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.661] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0229.661] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", nBufferLength=0x3b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", lpFilePart=0x0) returned 0x3a [0229.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.661] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netlbfo"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c2fdb4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207c536a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.662] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0229.662] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", nBufferLength=0x3a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", lpFilePart=0x0) returned 0x39 [0229.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.662] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netnat"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c7d5c2, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207eb5c8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.663] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0229.663] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", nBufferLength=0x3a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", lpFilePart=0x0) returned 0x39 [0229.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.663] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netqos"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1c7e767, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x207eb5c8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.663] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0229.664] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", nBufferLength=0x3f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", lpFilePart=0x0) returned 0x3e [0229.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.664] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netsecurity"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1d3e2ea, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d025724, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0229.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.664] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0229.664] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", lpFilePart=0x0) returned 0x40 [0229.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.665] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netswitchteam"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dbbc19, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2081182e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.665] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0229.665] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", nBufferLength=0x3c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", lpFilePart=0x0) returned 0x3b [0229.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.665] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\nettcpip"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dbc877, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20837aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.666] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0229.666] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", nBufferLength=0x4d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", lpFilePart=0x0) returned 0x4c [0229.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.666] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networkconnectivitystatus"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e300dc, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20837aa0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.667] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0229.667] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", nBufferLength=0x45, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", lpFilePart=0x0) returned 0x44 [0229.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.667] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networktransition"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e30eea, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0229.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.668] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0229.668] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", lpFilePart=0x0) returned 0x36 [0229.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.668] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pki"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e319e4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.669] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0229.669] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", lpFilePart=0x0) returned 0x3c [0229.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.669] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pnpdevice"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e92e4b, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2085dd02, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.670] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0229.670] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", nBufferLength=0x43, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", lpFilePart=0x0) returned 0x42 [0229.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.670] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\printmanagement"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e93bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x208aa1cb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0229.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.671] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0229.671] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x4f, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", lpFilePart=0x0) returned 0x4e [0229.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.671] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1e950c4, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.672] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0229.672] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", lpFilePart=0x0) returned 0x40 [0229.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.672] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdiagnostics"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1f64ff6, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.673] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0229.673] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x42, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", lpFilePart=0x0) returned 0x41 [0229.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.673] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psscheduledjob"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1f65404, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.674] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0229.674] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", nBufferLength=0x42, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", lpFilePart=0x0) returned 0x41 [0229.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.674] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\scheduledtasks"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb8b03, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2091c8fd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.674] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0229.675] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", nBufferLength=0x3e, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", lpFilePart=0x0) returned 0x3d [0229.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.675] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\secureboot"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb91fe, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.675] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0229.675] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", nBufferLength=0x3b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", lpFilePart=0x0) returned 0x3a [0229.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.676] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\storage"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fb9d09, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20968dca, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.676] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0229.676] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", lpFilePart=0x0) returned 0x36 [0229.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.676] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\tls"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fba32e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20968dca, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.677] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0229.677] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x47, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", lpFilePart=0x0) returned 0x46 [0229.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.677] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\troubleshootingpack"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbaba9, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.677] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0229.677] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", lpFilePart=0x0) returned 0x48 [0229.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.678] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\trustedplatformmodule"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbbc28, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.678] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0229.678] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", nBufferLength=0x37, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", lpFilePart=0x0) returned 0x36 [0229.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.678] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\uev"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6e5be8c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1fbcd58, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0xe966970b, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.679] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0229.679] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", nBufferLength=0x3d, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", lpFilePart=0x0) returned 0x3c [0229.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.679] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\vpnclient"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1fbd4ae, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x8d04b97d, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.679] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0229.679] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", nBufferLength=0x38, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", lpFilePart=0x0) returned 0x37 [0229.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.679] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\wdac"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205dc90, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0229.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.680] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0229.680] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", nBufferLength=0x4b, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", lpFilePart=0x0) returned 0x4a [0229.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.680] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsdeveloperlicense"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205e730, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.680] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0229.680] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", nBufferLength=0x49, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", lpFilePart=0x0) returned 0x48 [0229.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.680] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowserrorreporting"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205efde, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.681] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0229.681] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", nBufferLength=0x41, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", lpFilePart=0x0) returned 0x40 [0229.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de774) returned 1 [0229.681] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsupdate"), fInfoLevelId=0x0, lpFileInformation=0x85de7f0 | out: lpFileInformation=0x85de7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x185d2759, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x205f3c7, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2098f030, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0229.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de770) returned 1 [0229.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.682] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0229.682] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0229.682] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\*", lpFindFileData=0x85de50c | out: lpFindFileData=0x85de50c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acb52e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x107e138 [0229.682] FindNextFileW (in: hFindFile=0x107e138, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1acb52e, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x20752c33, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.683] FindNextFileW (in: hFindFile=0x107e138, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psd1", cAlternateFileName="")) returned 1 [0229.683] FindNextFileW (in: hFindFile=0x107e138, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 1 [0229.684] FindNextFileW (in: hFindFile=0x107e138, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fe5a6a2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fe5a6a2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fe5a6a2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 0 [0229.684] FindClose (in: hFindFile=0x107e138 | out: hFindFile=0x107e138) returned 1 [0229.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.684] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0229.685] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0229.685] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0229.685] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0229.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de7e4) returned 1 [0229.688] FindNextFileW (in: hFindFile=0x107dcb8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18586290, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1a686f1, ftLastAccessTime.dwHighDateTime=0x1d47ca4, ftLastWriteTime.dwLowDateTime=0x2072c9cd, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.689] FindNextFileW (in: hFindFile=0x107dcb8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fef3047, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fef3047, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fef3047, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management.psd1", cAlternateFileName="")) returned 1 [0229.689] FindNextFileW (in: hFindFile=0x107dcb8, lpFindFileData=0x85de518 | out: lpFindFileData=0x85de518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fef3047, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fef3047, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fef3047, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management.psd1", cAlternateFileName="")) returned 0 [0229.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7a0) returned 1 [0229.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7ac) returned 1 [0229.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de79c) returned 1 [0229.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de798) returned 1 [0229.690] CoCreateGuid (in: pguid=0x85de824 | out: pguid=0x85de824*(Data1=0x94a11c0d, Data2=0x5bcc, Data3=0x4ed3, Data4=([0]=0xa3, [1]=0xa5, [2]=0xc0, [3]=0xbd, [4]=0x25, [5]=0xf3, [6]=0x95, [7]=0xb1))) returned 0x0 [0229.691] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7a0 [0229.691] AmsiCloseSession () returned 0x3497830 [0229.691] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x7c8 [0229.692] SetThreadUILanguage (LangId=0x0) returned 0xdc0409 [0230.040] EtwEventActivityIdControl (in: ControlCode=0x3, ActivityId=0x85de4ec*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de4ec*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x40, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0230.040] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85de458*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de458*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x3f, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0230.040] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0x85de4dc*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x40, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0x85de4dc*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x40, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0230.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de2a4) returned 1 [0230.052] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x85de320 | out: lpFileInformation=0x85de320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fef3047, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9fef3047, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9fef3047, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea)) returned 1 [0230.053] CoTaskMemAlloc (cb=0x20c) returned 0x759d170 [0230.053] GetSystemDirectoryW (in: lpBuffer=0x759d170, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0230.053] CoTaskMemFree (pv=0x759d170) [0230.054] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x85ddf48 | out: phkResult=0x85ddf48*=0x7bc) returned 0x0 [0230.055] RegQueryValueExW (in: hKey=0x7bc, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x85ddf64, lpData=0x0, lpcbData=0x85ddf60*=0x0 | out: lpType=0x85ddf64*=0x0, lpData=0x0, lpcbData=0x85ddf60*=0x0) returned 0x2 [0230.055] RegCloseKey (hKey=0x7bc) returned 0x0 [0230.056] SetFilePointer (in: hFile=0x7bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x85ddefc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85ddefc*=0) returned 0x0 [0230.056] ReadFile (in: hFile=0x7bc, lpBuffer=0x521d918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85ddf28, lpOverlapped=0x0 | out: lpBuffer=0x521d918*, lpNumberOfBytesRead=0x85ddf28*=0x9ea, lpOverlapped=0x0) returned 1 [0230.059] SetFilePointer (in: hFile=0x7bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x85ddefc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85ddefc*=0) returned 0x9ea [0230.060] ReadFile (in: hFile=0x7bc, lpBuffer=0x521cea2, nNumberOfBytesToRead=0x216, lpNumberOfBytesRead=0x85ddf28, lpOverlapped=0x0 | out: lpBuffer=0x521cea2*, lpNumberOfBytesRead=0x85ddf28*=0x0, lpOverlapped=0x0) returned 1 [0230.060] SetFilePointer (in: hFile=0x7bc, lDistanceToMove=0, lpDistanceToMoveHigh=0x85ddefc*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x85ddefc*=0) returned 0x9ea [0230.060] ReadFile (in: hFile=0x7bc, lpBuffer=0x521d918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x85ddf28, lpOverlapped=0x0 | out: lpBuffer=0x521d918*, lpNumberOfBytesRead=0x85ddf28*=0x0, lpOverlapped=0x0) returned 1 [0230.060] CoTaskMemAlloc (cb=0x20c) returned 0x759d170 [0230.060] GetSystemDirectoryW (in: lpBuffer=0x759d170, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0230.060] CoTaskMemFree (pv=0x759d170) [0230.061] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x85dde9c | out: phkResult=0x85dde9c*=0x7cc) returned 0x0 [0230.062] RegQueryValueExW (in: hKey=0x7cc, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x85ddeb8, lpData=0x0, lpcbData=0x85ddeb4*=0x0 | out: lpType=0x85ddeb8*=0x0, lpData=0x0, lpcbData=0x85ddeb4*=0x0) returned 0x2 [0230.062] RegCloseKey (hKey=0x7cc) returned 0x0 [0230.062] CloseHandle (hObject=0x7bc) returned 1 [0230.068] CoCreateGuid (in: pguid=0x85ddf8c | out: pguid=0x85ddf8c*(Data1=0x85d02367, Data2=0xcc12, Data3=0x420a, Data4=([0]=0x8f, [1]=0x39, [2]=0x12, [3]=0x94, [4]=0x82, [5]=0x1d, [6]=0x9d, [7]=0xf7))) returned 0x0 [0230.068] QueryPerformanceCounter (in: lpPerformanceCount=0x85ddcec | out: lpPerformanceCount=0x85ddcec*=32534897049) returned 1 [0230.069] WTGetSignatureInfo () returned 0x0 [0231.216] CertDuplicateCertificateContext (pCertContext=0x1133240) returned 0x1133240 [0231.217] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85ddbcc | out: phkResult=0x85ddbcc*=0x7e0) returned 0x0 [0231.218] RegQueryValueExW (in: hKey=0x7e0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85ddbec, lpData=0x0, lpcbData=0x85ddbe8*=0x0 | out: lpType=0x85ddbec*=0x1, lpData=0x0, lpcbData=0x85ddbe8*=0x56) returned 0x0 [0231.218] RegQueryValueExW (in: hKey=0x7e0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85ddbec, lpData=0x522b8d4, lpcbData=0x85ddbe8*=0x56 | out: lpType=0x85ddbec*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85ddbe8*=0x56) returned 0x0 [0231.218] RegCloseKey (hKey=0x7e0) returned 0x0 [0231.219] CoTaskMemAlloc (cb=0x10) returned 0x75e8220 [0231.219] CoTaskMemAlloc (cb=0x30) returned 0x75f9a60 [0231.219] WinVerifyTrust () returned 0x0 [0231.223] CoTaskMemFree (pv=0x75f9a60) [0231.223] CoTaskMemFree (pv=0x75e8220) [0231.223] CertFreeCertificateContext (pCertContext=0x1133240) returned 1 [0231.224] CloseHandle (hObject=0x7bc) returned 1 [0231.224] AmsiOpenSession () returned 0x0 [0231.224] AmsiScanString () returned 0x80070015 [0231.374] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\en-US\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\en-us\\microsoft.powershell.management.psd1")) returned 0xffffffff [0231.374] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\en\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\en\\microsoft.powershell.management.psd1")) returned 0xffffffff [0231.691] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x67 [0231.691] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", nBufferLength=0x67, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x66 [0231.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd620) returned 1 [0231.691] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x85dd69c | out: lpFileInformation=0x85dd69c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0231.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd61c) returned 1 [0231.691] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0231.691] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Commands.Management.dll\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.commands.management.dll\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0231.692] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x85dd358, nSize=0xc3 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files (x86)\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0xc2 [0231.694] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0231.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0231.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x54, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x53 [0231.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd428) returned 1 [0231.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x85dd4a4 | out: lpFileInformation=0x85dd4a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0231.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd424) returned 1 [0231.699] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0231.703] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\modules")) returned 0xffffffff [0232.078] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules" (normalized: "c:\\program files (x86)\\windowspowershell\\modules")) returned 0x10 [0232.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5a [0232.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x5a, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x59 [0232.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd428) returned 1 [0232.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x85dd4a4 | out: lpFileInformation=0x85dd4a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0232.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd424) returned 1 [0232.085] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0232.091] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules")) returned 0x10 [0232.093] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0232.093] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x5c, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x5b [0232.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85dd428) returned 1 [0232.093] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x85dd4a4 | out: lpFileInformation=0x85dd4a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0232.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85dd424) returned 1 [0232.097] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0234.166] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0234.166] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0234.166] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0234.166] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0234.167] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0234.167] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0236.590] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x774) returned 0x0 [0236.596] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0236.597] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x522eda0, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0236.597] RegCloseKey (hKey=0x774) returned 0x0 [0236.597] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x774) returned 0x0 [0236.599] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0236.599] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x522f0b4, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0236.599] RegCloseKey (hKey=0x774) returned 0x0 [0236.718] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x774) returned 0x0 [0236.720] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0236.720] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x522f3b0, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0236.720] RegCloseKey (hKey=0x774) returned 0x0 [0236.721] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de2ec | out: phkResult=0x85de2ec*=0x774) returned 0x0 [0236.722] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x0, lpcbData=0x85de308*=0x0 | out: lpType=0x85de30c*=0x1, lpData=0x0, lpcbData=0x85de308*=0x56) returned 0x0 [0236.722] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de30c, lpData=0x522f6c4, lpcbData=0x85de308*=0x56 | out: lpType=0x85de30c*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de308*=0x56) returned 0x0 [0236.722] RegCloseKey (hKey=0x774) returned 0x0 [0236.723] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x85de338 | out: phkResult=0x85de338*=0x774) returned 0x0 [0236.724] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de358, lpData=0x0, lpcbData=0x85de354*=0x0 | out: lpType=0x85de358*=0x1, lpData=0x0, lpcbData=0x85de354*=0x56) returned 0x0 [0236.724] RegQueryValueExW (in: hKey=0x774, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x85de358, lpData=0x522f9c0, lpcbData=0x85de354*=0x56 | out: lpType=0x85de358*=0x1, lpData="C:\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0", lpcbData=0x85de354*=0x56) returned 0x0 [0236.724] RegCloseKey (hKey=0x774) returned 0x0 [0236.754] CoTaskMemAlloc (cb=0x20c) returned 0x759d170 [0236.754] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x759d170 | out: pszPath="C:\\Program Files (x86)") returned 0x0 [0236.755] CoTaskMemFree (pv=0x759d170) [0236.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x17 [0236.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x17, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0236.888] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85de47c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de47c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x40, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0236.889] SetEvent (hEvent=0x7c8) returned 1 [0236.890] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x85de68c*=0x7c8, lpdwindex=0x85de4ac | out: lpdwindex=0x85de4ac) returned 0x0 [0236.891] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x85de620, nSize=0xc3 | out: lpBuffer="") returned 0x0 [0236.894] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x624, lpConsoleScreenBufferInfo=0x85de780 | out: lpConsoleScreenBufferInfo=0x85de780) returned 1 [0237.216] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x624, lpConsoleScreenBufferInfo=0x85de780 | out: lpConsoleScreenBufferInfo=0x85de780) returned 1 [0238.408] EtwEventActivityIdControl (in: ControlCode=0x3, ActivityId=0x85dea4c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85dea4c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x48, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0238.409] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85de9b8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de9b8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x40, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0238.409] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0x85dea3c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x48, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0x85dea3c*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x48, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0238.821] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe")) returned 0x20 [0238.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0238.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x23, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpFilePart=0x0) returned 0x22 [0238.833] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0238.923] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0238.924] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0238.924] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0238.924] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0238.924] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0238.925] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0238.925] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0238.925] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0238.925] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0238.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x10 [0238.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x10, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0238.926] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0238.926] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0238.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x18 [0238.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x18, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0238.927] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe")) returned 0x20 [0238.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0238.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x23, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpFilePart=0x0) returned 0x22 [0238.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0238.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x23, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpFilePart=0x0) returned 0x22 [0238.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de810) returned 1 [0238.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0238.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x23, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpFilePart=0x0) returned 0x22 [0238.946] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe\\*", lpFindFileData=0x85de538 | out: lpFindFileData=0x85de538*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0238.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de7d4) returned 1 [0238.950] CoTaskMemAlloc (cb=0x404) returned 0x75e3438 [0238.950] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x10b, dwLanguageId=0x0, lpBuffer=0x75e3438, nSize=0x200, Arguments=0x0 | out: lpBuffer="The directory name is invalid.\r\n") returned 0x20 [0238.952] CoTaskMemFree (pv=0x75e3438) [0239.155] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe")) returned 0x20 [0239.155] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x23 [0239.155] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", nBufferLength=0x23, lpBuffer=0x10c3ff0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe", lpFilePart=0x0) returned 0x22 [0239.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x85de718) returned 1 [0239.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe"), fInfoLevelId=0x0, lpFileInformation=0x52489a8 | out: lpFileInformation=0x52489a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b883600, ftCreationTime.dwHighDateTime=0x1d61c67, ftLastAccessTime.dwLowDateTime=0x3b883600, ftLastAccessTime.dwHighDateTime=0x1d61c67, ftLastWriteTime.dwLowDateTime=0x5f944900, ftLastWriteTime.dwHighDateTime=0x1d61c60, nFileSizeHigh=0x0, nFileSizeLow=0x19400)) returned 1 [0239.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x85de714) returned 1 [0239.716] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ctfmon.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\ctfmon.exe")) returned 1 [0239.829] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85de9dc*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85de9dc*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x48, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0239.830] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85ded48*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85ded48*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x48, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0239.830] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0x85deda8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x38, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0x85deda8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x38, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0239.831] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85ded48*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85ded48*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x38, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0239.831] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0x85deda8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x39, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0x85deda8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x39, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0239.835] SetEvent (hEvent=0x6cc) returned 1 [0239.836] SetEvent (hEvent=0x6c0) returned 1 [0239.836] SetEvent (hEvent=0x6c4) returned 1 [0239.836] SetEvent (hEvent=0x6c8) returned 1 [0239.836] SetEvent (hEvent=0x6dc) returned 1 [0239.836] SetEvent (hEvent=0x6d0) returned 1 [0239.836] SetEvent (hEvent=0x6d4) returned 1 [0239.836] SetEvent (hEvent=0x6d8) returned 1 [0239.836] SetEvent (hEvent=0x6e0) returned 1 [0239.844] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x85deedc*=0x6e8, lpdwindex=0x85decfc | out: lpdwindex=0x85decfc) returned 0x0 [0239.845] SetThreadUILanguage (LangId=0x0) returned 0xdc0409 [0240.029] CoCreateGuid (in: pguid=0x85ded48 | out: pguid=0x85ded48*(Data1=0xd0b3a5b8, Data2=0x1f28, Data3=0x4c28, Data4=([0]=0xb8, [1]=0x39, [2]=0x86, [3]=0x38, [4]=0xa, [5]=0xee, [6]=0x79, [7]=0x2a))) returned 0x0 [0240.040] QueryPerformanceCounter (in: lpPerformanceCount=0x85ded28 | out: lpPerformanceCount=0x85ded28*=33532039823) returned 1 [0240.040] AmsiOpenSession () returned 0x0 [0240.040] AmsiScanString () returned 0x80070015 [0241.120] QueryPerformanceCounter (in: lpPerformanceCount=0x85decf0 | out: lpPerformanceCount=0x85decf0*=33640008422) returned 1 [0241.120] EtwEventActivityIdControl (in: ControlCode=0x3, ActivityId=0x85dedb8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85dedb8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x49, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0241.120] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85ded24*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85ded24*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x39, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0241.120] EtwEventActivityIdControl (in: ControlCode=0x2, ActivityId=0x85deda8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x49, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1)) | out: ActivityId=0x85deda8*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x49, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0241.305] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x2, pHandles=0x85de8a0*=0x7e0, lpdwindex=0x85de75c | out: lpdwindex=0x85de75c) returned 0x0 [0241.311] SetEvent (hEvent=0x770) returned 1 [0241.311] SetEvent (hEvent=0x7e0) returned 1 [0241.311] EtwEventActivityIdControl (in: ControlCode=0x1, ActivityId=0x85ded48*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)) | out: ActivityId=0x85ded48*(Data1=0xa8ae3886, Data2=0xf12a, Data3=0x0, Data4=([0]=0x49, [1]=0x51, [2]=0xae, [3]=0xa8, [4]=0x2a, [5]=0xf1, [6]=0xd5, [7]=0x1))) returned 0x0 [0241.312] SetEvent (hEvent=0x7c0) returned 1 [0241.312] SetEvent (hEvent=0x770) returned 1 [0241.312] SetEvent (hEvent=0x7e0) returned 1 [0241.312] SetEvent (hEvent=0x7d4) returned 1 [0241.312] SetEvent (hEvent=0x7d0) returned 1 [0241.312] SetEvent (hEvent=0x7c4) returned 1 [0241.312] SetEvent (hEvent=0x7ec) returned 1 [0241.312] SetEvent (hEvent=0x7e4) returned 1 [0241.325] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x85deedc*=0x6e8, lpdwindex=0x85decfc | out: lpdwindex=0x85decfc) returned 0x0 [0245.279] CoGetContextToken (in: pToken=0x85df2d0 | out: pToken=0x85df2d0) returned 0x0 [0245.280] CoUninitialize () Thread: id = 201 os_tid = 0x36c Thread: id = 218 os_tid = 0xb50 [0210.422] CoGetContextToken (in: pToken=0x7bcf884 | out: pToken=0x7bcf884) returned 0x0 [0210.422] CObjectContext::QueryInterface () returned 0x0 [0210.422] CObjectContext::GetCurrentThreadType () returned 0x0 [0210.422] Release () returned 0x0 [0210.422] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0210.422] RoInitialize () returned 0x1 [0210.422] RoUninitialize () returned 0x0 [0210.422] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0210.423] SleepEx (dwMilliseconds=0x2710, bAlertable=1) returned 0x0 [0220.524] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) Thread: id = 596 os_tid = 0xa94 Thread: id = 597 os_tid = 0xca4 Thread: id = 599 os_tid = 0xb00 Thread: id = 600 os_tid = 0xd34 Thread: id = 602 os_tid = 0x1a0 Thread: id = 606 os_tid = 0xe9c Thread: id = 607 os_tid = 0xe94 Thread: id = 609 os_tid = 0xef8 Thread: id = 610 os_tid = 0xdac Process: id = "7" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x14f0b000" os_pid = "0x107c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x1060" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 152 os_tid = 0x1080 Thread: id = 155 os_tid = 0x12a8 Thread: id = 156 os_tid = 0xf50 Thread: id = 157 os_tid = 0xbdc Thread: id = 158 os_tid = 0xf44 Process: id = "8" image_name = "sc.exe" filename = "c:\\windows\\system32\\sc.exe" page_root = "0x14a04000" os_pid = "0x1098" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x3ac" cmd_line = "C:\\WINDOWS\\system32\\sc.exe start wuauserv" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xe], "NT SERVICE\\wlidsvc" [0xe], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 163 os_tid = 0xe98 [0211.593] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff7b1120000 [0211.593] __set_app_type (_Type=0x1) [0211.593] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff7b11222b0) returned 0x0 [0211.594] __wgetmainargs (in: _Argc=0x7ff7b1131028, _Argv=0x7ff7b1131030, _Env=0x7ff7b1131038, _DoWildCard=0, _StartInfo=0x7ff7b1131044 | out: _Argc=0x7ff7b1131028, _Argv=0x7ff7b1131030, _Env=0x7ff7b1131038) returned 0 [0211.594] SetThreadUILanguage (LangId=0x0) returned 0x409 [0211.618] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0211.618] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50 [0211.618] wcsncmp (_String1="st", _String2="\\\\", _MaxCount=0x2) returned 23 [0211.618] _wcsicmp (_String1="start", _String2="query") returned 2 [0211.618] _wcsicmp (_String1="start", _String2="queryex") returned 2 [0211.618] _wcsicmp (_String1="start", _String2="start") returned 0 [0211.618] ResolveDelayLoadedAPI () returned 0x7ffce9434cf0 [0211.622] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x192df8c85b0 [0211.661] OpenServiceW (hSCManager=0x192df8c85b0, lpServiceName="wuauserv", dwDesiredAccess=0x14) returned 0x192df8c6b30 [0211.663] StartServiceW (hService=0x192df8c6b30, dwNumServiceArgs=0x0, lpServiceArgVectors=0x0) returned 0 [0211.713] GetLastError () returned 0x420 [0211.713] _ultow (in: _Dest=0x420, _Radix=1579678952 | out: _Dest=0x420) returned="1056" [0211.713] FormatMessageW (in: dwFlags=0x1200, lpSource=0x0, dwMessageId=0x420, dwLanguageId=0x0, lpBuffer=0x7ff7b1131640, nSize=0x400, Arguments=0x0 | out: lpBuffer="An instance of the service is already running.\r\n") returned 0x30 [0216.502] FormatMessageW (in: dwFlags=0x2900, lpSource=0x0, dwMessageId=0x65, dwLanguageId=0x0, lpBuffer=0x235e27fca0, nSize=0x2, Arguments=0x235e27fcd0 | out: lpBuffer="栀?ƒ") returned 0x54 [0216.523] GetFileType (hFile=0x50) returned 0x2 [0216.524] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x235e27fc50 | out: lpMode=0x235e27fc50) returned 1 [0216.566] WriteConsoleW (in: hConsoleOutput=0x50, lpBuffer=0x192df8c6800*, nNumberOfCharsToWrite=0x54, lpNumberOfCharsWritten=0x235e27fc48, lpReserved=0x0 | out: lpBuffer=0x192df8c6800*, lpNumberOfCharsWritten=0x235e27fc48*=0x54) returned 1 [0216.567] LocalFree (hMem=0x192df8c6800) returned 0x0 [0216.567] LocalFree (hMem=0x0) returned 0x0 [0216.567] CloseServiceHandle (hSCObject=0x192df8c6b30) returned 1 [0216.569] CloseServiceHandle (hSCObject=0x192df8c85b0) returned 1 [0216.570] LocalFree (hMem=0x0) returned 0x0 [0216.570] exit (_Code=1056) Thread: id = 598 os_tid = 0x868 Thread: id = 601 os_tid = 0x868 Thread: id = 605 os_tid = 0x868 Process: id = "9" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x5edd6000" os_pid = "0x13cc" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x3ac" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xe], "NT SERVICE\\wlidsvc" [0xe], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 169 os_tid = 0x13bc Thread: id = 171 os_tid = 0x13c4 Thread: id = 172 os_tid = 0x13c0 Thread: id = 173 os_tid = 0x13e4 Thread: id = 174 os_tid = 0x13c8 Thread: id = 175 os_tid = 0x510 Thread: id = 611 os_tid = 0xecc Process: id = "10" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x21b31000" os_pid = "0x1378" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x1098" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xe], "NT SERVICE\\wlidsvc" [0xe], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f6a" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 186 os_tid = 0x136c Thread: id = 191 os_tid = 0xd10 Thread: id = 195 os_tid = 0x1298 Thread: id = 200 os_tid = 0x13b4 Thread: id = 202 os_tid = 0xfcc Process: id = "11" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x78fd000" os_pid = "0xd54" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x2a4" cmd_line = "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:000a05e1" [0xc000000f] Thread: id = 209 os_tid = 0xc2c Thread: id = 210 os_tid = 0x2c0 Thread: id = 211 os_tid = 0xaac Thread: id = 212 os_tid = 0xd2c Thread: id = 213 os_tid = 0x79c Thread: id = 214 os_tid = 0xd38 Thread: id = 215 os_tid = 0xd68 Thread: id = 216 os_tid = 0xdbc Thread: id = 217 os_tid = 0xdd0 Thread: id = 595 os_tid = 0x564 Process: id = "12" image_name = "System" filename = "" page_root = "0x1aa000" os_pid = "0x4" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "created_daemon" parent_id = "8" os_parent_pid = "0xffffffffffffffff" cmd_line = "" cur_dir = "" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 219 os_tid = 0x1c Thread: id = 220 os_tid = 0x1178 Thread: id = 221 os_tid = 0x12bc Thread: id = 222 os_tid = 0x80 Thread: id = 223 os_tid = 0xe8 Thread: id = 224 os_tid = 0x1334 Thread: id = 225 os_tid = 0x124 Thread: id = 226 os_tid = 0xf5c Thread: id = 227 os_tid = 0x14 Thread: id = 228 os_tid = 0xfa0 Thread: id = 229 os_tid = 0xf9c Thread: id = 230 os_tid = 0xf58 Thread: id = 231 os_tid = 0x128 Thread: id = 232 os_tid = 0xe58 Thread: id = 233 os_tid = 0x0 Thread: id = 234 os_tid = 0x30 Thread: id = 235 os_tid = 0x188 Thread: id = 236 os_tid = 0x100 Thread: id = 237 os_tid = 0xb18 Thread: id = 238 os_tid = 0xb14 Thread: id = 239 os_tid = 0xa8 Thread: id = 240 os_tid = 0xa64 Thread: id = 241 os_tid = 0xc4 Thread: id = 242 os_tid = 0x84 Thread: id = 243 os_tid = 0x9dc Thread: id = 244 os_tid = 0x974 Thread: id = 245 os_tid = 0x8d0 Thread: id = 246 os_tid = 0x8b0 Thread: id = 247 os_tid = 0x848 Thread: id = 248 os_tid = 0x844 Thread: id = 249 os_tid = 0x82c Thread: id = 250 os_tid = 0x4d8 Thread: id = 251 os_tid = 0x10 Thread: id = 252 os_tid = 0x664 Thread: id = 253 os_tid = 0x644 Thread: id = 254 os_tid = 0x64 Thread: id = 255 os_tid = 0x5e0 Thread: id = 256 os_tid = 0x34 Thread: id = 257 os_tid = 0x4a4 Thread: id = 258 os_tid = 0x49c Thread: id = 259 os_tid = 0x40 Thread: id = 260 os_tid = 0x1b8 Thread: id = 261 os_tid = 0x6c Thread: id = 262 os_tid = 0xb0 Thread: id = 263 os_tid = 0x364 Thread: id = 264 os_tid = 0x2c Thread: id = 265 os_tid = 0x1b4 Thread: id = 266 os_tid = 0x8c Thread: id = 267 os_tid = 0x2f8 Thread: id = 268 os_tid = 0x68 Thread: id = 269 os_tid = 0x174 Thread: id = 270 os_tid = 0xfc Thread: id = 271 os_tid = 0x60 Thread: id = 272 os_tid = 0x164 Thread: id = 273 os_tid = 0x70 Thread: id = 274 os_tid = 0x74 Thread: id = 275 os_tid = 0x1f8 Thread: id = 276 os_tid = 0x13c Thread: id = 277 os_tid = 0x1bc Thread: id = 278 os_tid = 0x1b0 Thread: id = 279 os_tid = 0x1ac Thread: id = 280 os_tid = 0x1a8 Thread: id = 281 os_tid = 0x28 Thread: id = 282 os_tid = 0x130 Thread: id = 283 os_tid = 0xe4 Thread: id = 284 os_tid = 0x20 Thread: id = 285 os_tid = 0x54 Thread: id = 286 os_tid = 0xbc Thread: id = 287 os_tid = 0x180 Thread: id = 288 os_tid = 0xc8 Thread: id = 289 os_tid = 0xa4 Thread: id = 290 os_tid = 0x50 Thread: id = 291 os_tid = 0x11c Thread: id = 292 os_tid = 0x120 Thread: id = 293 os_tid = 0x15c Thread: id = 294 os_tid = 0x14c Thread: id = 295 os_tid = 0xb8 Thread: id = 296 os_tid = 0x148 Thread: id = 297 os_tid = 0x88 Thread: id = 298 os_tid = 0xb4 Thread: id = 299 os_tid = 0xec Thread: id = 300 os_tid = 0x8 Thread: id = 301 os_tid = 0xf0 Thread: id = 604 os_tid = 0x18 Process: id = "13" image_name = "services.exe" filename = "c:\\windows\\system32\\services.exe" page_root = "0x56669000" os_pid = "0x23c" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "created_daemon" parent_id = "8" os_parent_pid = "0x1dc" cmd_line = "C:\\WINDOWS\\system32\\services.exe" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 302 os_tid = 0x790 Thread: id = 303 os_tid = 0x116c Thread: id = 304 os_tid = 0x86c Thread: id = 305 os_tid = 0x854 Thread: id = 306 os_tid = 0x12c Thread: id = 307 os_tid = 0x3ec Thread: id = 308 os_tid = 0x3e8 Thread: id = 309 os_tid = 0x3e4 Thread: id = 310 os_tid = 0x3d4 Thread: id = 311 os_tid = 0x3d0 Thread: id = 312 os_tid = 0x3bc Thread: id = 313 os_tid = 0x328 Thread: id = 314 os_tid = 0x2fc Thread: id = 315 os_tid = 0x298 Thread: id = 316 os_tid = 0x294 Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x75ed0000" os_pid = "0x2a4" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k DcomLaunch" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BrokerInfrastructure" [0xa], "NT SERVICE\\DcomLaunch" [0xa], "NT SERVICE\\DeviceInstall" [0xa], "NT SERVICE\\LSM" [0xa], "NT SERVICE\\PlugPlay" [0xe], "NT SERVICE\\Power" [0xa], "NT SERVICE\\SystemEventsBroker" [0xa], "NT AUTHORITY\\Logon Session 00000000:00004ed0" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 317 os_tid = 0xff4 Thread: id = 318 os_tid = 0xb0c Thread: id = 319 os_tid = 0xa9c Thread: id = 320 os_tid = 0x9b4 Thread: id = 321 os_tid = 0x9a4 Thread: id = 322 os_tid = 0x99c Thread: id = 323 os_tid = 0x964 Thread: id = 324 os_tid = 0x960 Thread: id = 325 os_tid = 0x954 Thread: id = 326 os_tid = 0x948 Thread: id = 327 os_tid = 0x92c Thread: id = 328 os_tid = 0x918 Thread: id = 329 os_tid = 0x90c Thread: id = 330 os_tid = 0x75c Thread: id = 331 os_tid = 0x758 Thread: id = 332 os_tid = 0x638 Thread: id = 333 os_tid = 0x62c Thread: id = 334 os_tid = 0x40c Thread: id = 335 os_tid = 0x314 Thread: id = 336 os_tid = 0x2ec Thread: id = 337 os_tid = 0x3b4 Thread: id = 338 os_tid = 0x358 Thread: id = 339 os_tid = 0x354 Thread: id = 340 os_tid = 0x340 Thread: id = 341 os_tid = 0x32c Thread: id = 342 os_tid = 0x31c Thread: id = 343 os_tid = 0x30c Thread: id = 344 os_tid = 0x2f4 Thread: id = 345 os_tid = 0x2a8 Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x74d18000" os_pid = "0x304" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k RPCSS" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\RpcEptMapper" [0xe], "NT SERVICE\\RpcSs" [0xa], "NT AUTHORITY\\Logon Session 00000000:00008d78" [0xc000000f], "LOCAL" [0x7] Thread: id = 346 os_tid = 0x9ac Thread: id = 347 os_tid = 0x9a8 Thread: id = 348 os_tid = 0x950 Thread: id = 349 os_tid = 0x94c Thread: id = 350 os_tid = 0x93c Thread: id = 351 os_tid = 0x938 Thread: id = 352 os_tid = 0x934 Thread: id = 353 os_tid = 0x928 Thread: id = 354 os_tid = 0x924 Thread: id = 355 os_tid = 0x91c Thread: id = 356 os_tid = 0x640 Thread: id = 357 os_tid = 0x63c Thread: id = 358 os_tid = 0x630 Thread: id = 359 os_tid = 0x628 Thread: id = 360 os_tid = 0x3c8 Thread: id = 361 os_tid = 0x344 Thread: id = 362 os_tid = 0x338 Thread: id = 363 os_tid = 0x334 Thread: id = 364 os_tid = 0x324 Thread: id = 365 os_tid = 0x320 Thread: id = 366 os_tid = 0x318 Thread: id = 367 os_tid = 0x308 Process: id = "16" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x74331000" os_pid = "0x3c0" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xa], "NT SERVICE\\CoreMessagingRegistrar" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\NcdAutoSetup" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009f63" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 368 os_tid = 0xa60 Thread: id = 369 os_tid = 0xa5c Thread: id = 370 os_tid = 0xa58 Thread: id = 371 os_tid = 0xa34 Thread: id = 372 os_tid = 0xa1c Thread: id = 373 os_tid = 0xa18 Thread: id = 374 os_tid = 0x9f8 Thread: id = 375 os_tid = 0x8ec Thread: id = 376 os_tid = 0x8e8 Thread: id = 377 os_tid = 0x87c Thread: id = 378 os_tid = 0x870 Thread: id = 379 os_tid = 0x838 Thread: id = 380 os_tid = 0x834 Thread: id = 381 os_tid = 0x814 Thread: id = 382 os_tid = 0x7a8 Thread: id = 383 os_tid = 0x78c Thread: id = 384 os_tid = 0x7e0 Thread: id = 385 os_tid = 0x7f4 Thread: id = 386 os_tid = 0x694 Thread: id = 387 os_tid = 0x7d4 Thread: id = 388 os_tid = 0x7cc Thread: id = 389 os_tid = 0x7c8 Thread: id = 390 os_tid = 0x7c4 Thread: id = 391 os_tid = 0x65c Thread: id = 392 os_tid = 0x15c Thread: id = 393 os_tid = 0x3c4 Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x738d0000" os_pid = "0x3d8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AJRouter" [0xa], "NT SERVICE\\AppIDSvc" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xa], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\icssvc" [0xa], "NT SERVICE\\lmhosts" [0xe], "NT SERVICE\\NgcCtnrSvc" [0xa], "NT SERVICE\\RmSvc" [0xa], "NT SERVICE\\TimeBrokerSvc" [0xa], "NT SERVICE\\TimeBroker" [0xa], "NT SERVICE\\vmictimesync" [0xa], "S-1-5-80-1495648203-2503502111-1597754693-3445174711-1316708627" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a38e" [0xc000000f], "LOCAL" [0x7] Thread: id = 394 os_tid = 0xd24 Thread: id = 395 os_tid = 0x7e4 Thread: id = 396 os_tid = 0xff8 Thread: id = 397 os_tid = 0xfe4 Thread: id = 398 os_tid = 0x125c Thread: id = 399 os_tid = 0x1170 Thread: id = 400 os_tid = 0xf54 Thread: id = 401 os_tid = 0xf38 Thread: id = 402 os_tid = 0x54c Thread: id = 403 os_tid = 0x444 Thread: id = 404 os_tid = 0x418 Thread: id = 405 os_tid = 0x410 Thread: id = 406 os_tid = 0x35c Thread: id = 407 os_tid = 0x3f4 Thread: id = 408 os_tid = 0x3f0 Thread: id = 409 os_tid = 0x33c Thread: id = 410 os_tid = 0x238 Thread: id = 411 os_tid = 0x154 Thread: id = 412 os_tid = 0x3dc Process: id = "18" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x735ee000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xa], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\DeviceAssociationService" [0xa], "NT SERVICE\\DevQueryBroker" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\DsSvc" [0xa], "NT SERVICE\\fhsvc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\HvHost" [0xa], "S-1-5-80-2355113075-3359631449-3346493237-3667020425-1655874352" [0xa], "NT SERVICE\\irmon" [0xa], "NT SERVICE\\NcbService" [0xe], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\NgcSvc" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\ScDeviceEnum" [0xa], "NT SERVICE\\SensorService" [0xa], "NT SERVICE\\SmsRouter" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\svsvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\vmicguestinterface" [0xa], "NT SERVICE\\vmickvpexchange" [0xa], "NT SERVICE\\vmicshutdown" [0xa], "NT SERVICE\\vmicvmsession" [0xa], "NT SERVICE\\vmicvss" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\WiaRpc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a4e4" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 413 os_tid = 0xe60 Thread: id = 414 os_tid = 0xe5c Thread: id = 415 os_tid = 0x898 Thread: id = 416 os_tid = 0x894 Thread: id = 417 os_tid = 0x890 Thread: id = 418 os_tid = 0x88c Thread: id = 419 os_tid = 0x878 Thread: id = 420 os_tid = 0x5ac Thread: id = 421 os_tid = 0x548 Thread: id = 422 os_tid = 0x540 Thread: id = 423 os_tid = 0x4e0 Thread: id = 424 os_tid = 0x4bc Thread: id = 425 os_tid = 0x290 Thread: id = 426 os_tid = 0x164 Thread: id = 427 os_tid = 0x3fc Process: id = "19" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x566ab000" os_pid = "0x350" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\bthserv" [0xa], "NT SERVICE\\CDPSvc" [0xa], "NT SERVICE\\EventSystem" [0xa], "NT SERVICE\\FontCache" [0xa], "NT SERVICE\\LicenseManager" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xe], "NT SERVICE\\PhoneSvc" [0xa], "NT SERVICE\\RemoteRegistry" [0xa], "S-1-5-80-2226967063-754826275-1661302337-2802353169-2369347280" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\tzautoupdate" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "S-1-5-80-3916113136-2435487254-2535488001-4050622930-2364918814" [0xa], "NT SERVICE\\workfolderssvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b10d" [0xc000000f], "LOCAL" [0x7] Thread: id = 428 os_tid = 0xf74 Thread: id = 429 os_tid = 0xcbc Thread: id = 430 os_tid = 0xc24 Thread: id = 431 os_tid = 0xc10 Thread: id = 432 os_tid = 0xc0c Thread: id = 433 os_tid = 0xc08 Thread: id = 434 os_tid = 0xc04 Thread: id = 435 os_tid = 0xbd0 Thread: id = 436 os_tid = 0x9dc Thread: id = 437 os_tid = 0x544 Thread: id = 438 os_tid = 0x6f4 Thread: id = 439 os_tid = 0xbcc Thread: id = 440 os_tid = 0x4dc Thread: id = 441 os_tid = 0x490 Thread: id = 442 os_tid = 0x4c4 Thread: id = 443 os_tid = 0x9d4 Thread: id = 444 os_tid = 0x8f4 Thread: id = 445 os_tid = 0x700 Thread: id = 446 os_tid = 0x538 Thread: id = 447 os_tid = 0x534 Thread: id = 448 os_tid = 0x530 Thread: id = 449 os_tid = 0x500 Thread: id = 450 os_tid = 0x4b8 Thread: id = 451 os_tid = 0x498 Thread: id = 452 os_tid = 0x47c Thread: id = 453 os_tid = 0x478 Thread: id = 454 os_tid = 0x474 Thread: id = 455 os_tid = 0x470 Thread: id = 456 os_tid = 0x46c Thread: id = 457 os_tid = 0x468 Thread: id = 458 os_tid = 0x448 Thread: id = 459 os_tid = 0x424 Thread: id = 460 os_tid = 0x420 Thread: id = 461 os_tid = 0x364 Process: id = "20" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x667bb000" os_pid = "0x434" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\System32\\svchost.exe -k NetworkService" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xa], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\NlaSvc" [0xe], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bd29" [0xc000000f], "LOCAL" [0x7] Thread: id = 462 os_tid = 0xf4c Thread: id = 463 os_tid = 0x1038 Thread: id = 464 os_tid = 0x11f4 Thread: id = 465 os_tid = 0x11e8 Thread: id = 466 os_tid = 0x112c Thread: id = 467 os_tid = 0xd20 Thread: id = 468 os_tid = 0xcd4 Thread: id = 469 os_tid = 0xeec Thread: id = 470 os_tid = 0xeb0 Thread: id = 471 os_tid = 0x6b8 Thread: id = 472 os_tid = 0x864 Thread: id = 473 os_tid = 0x674 Thread: id = 474 os_tid = 0x658 Thread: id = 475 os_tid = 0x4d4 Thread: id = 476 os_tid = 0x4d0 Thread: id = 477 os_tid = 0x4cc Thread: id = 478 os_tid = 0x4c8 Thread: id = 479 os_tid = 0x4c0 Thread: id = 480 os_tid = 0x494 Thread: id = 481 os_tid = 0x48c Thread: id = 482 os_tid = 0x488 Thread: id = 483 os_tid = 0x464 Thread: id = 484 os_tid = 0x45c Thread: id = 485 os_tid = 0x458 Thread: id = 486 os_tid = 0x454 Thread: id = 487 os_tid = 0x450 Thread: id = 488 os_tid = 0x438 Process: id = "21" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x57af0000" os_pid = "0x554" os_integrity_level = "0x4000" os_privileges = "0x20800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000ec56" [0xc000000f], "LOCAL" [0x7] Thread: id = 489 os_tid = 0x13d4 Thread: id = 490 os_tid = 0x588 Thread: id = 491 os_tid = 0x584 Thread: id = 492 os_tid = 0x580 Thread: id = 493 os_tid = 0x57c Thread: id = 494 os_tid = 0x578 Thread: id = 495 os_tid = 0x574 Thread: id = 496 os_tid = 0x570 Thread: id = 497 os_tid = 0x558 Process: id = "22" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4f8fa000" os_pid = "0x590" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "S-1-5-80-4071458001-3563271761-1846288968-3700919931-3809667977" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000f41a" [0xc000000f], "LOCAL" [0x7] Thread: id = 498 os_tid = 0xcc0 Thread: id = 499 os_tid = 0xc30 Thread: id = 500 os_tid = 0x8e4 Thread: id = 501 os_tid = 0x8e0 Thread: id = 502 os_tid = 0x594 Process: id = "23" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4c27b000" os_pid = "0x598" os_integrity_level = "0x4000" os_privileges = "0x20800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Wcmsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000f421" [0xc000000f], "LOCAL" [0x7] Thread: id = 503 os_tid = 0x68c Thread: id = 504 os_tid = 0x66c Thread: id = 505 os_tid = 0x624 Thread: id = 506 os_tid = 0x614 Thread: id = 507 os_tid = 0x60c Thread: id = 508 os_tid = 0x608 Thread: id = 509 os_tid = 0x604 Thread: id = 510 os_tid = 0x600 Thread: id = 511 os_tid = 0x5d4 Thread: id = 512 os_tid = 0x59c Process: id = "24" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4c27d000" os_pid = "0x5b0" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000f8bc" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 513 os_tid = 0x9bc Thread: id = 514 os_tid = 0x7ec Thread: id = 515 os_tid = 0x770 Thread: id = 516 os_tid = 0x7d8 Thread: id = 517 os_tid = 0x698 Thread: id = 518 os_tid = 0x690 Thread: id = 519 os_tid = 0x5fc Thread: id = 520 os_tid = 0x5f8 Thread: id = 521 os_tid = 0x5f4 Thread: id = 522 os_tid = 0x5b4 Process: id = "25" image_name = "spoolsv.exe" filename = "c:\\windows\\system32\\spoolsv.exe" page_root = "0x4ac0c000" os_pid = "0x5e8" os_integrity_level = "0x4000" os_privileges = "0x20a00080" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\System32\\spoolsv.exe" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Spooler" [0xe], "NT AUTHORITY\\Logon Session 00000000:0001010e" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 523 os_tid = 0xa50 Thread: id = 524 os_tid = 0x130c Thread: id = 525 os_tid = 0x1308 Thread: id = 526 os_tid = 0x1300 Thread: id = 527 os_tid = 0x12fc Thread: id = 528 os_tid = 0x12f8 Thread: id = 529 os_tid = 0x12ec Thread: id = 530 os_tid = 0x12e4 Thread: id = 531 os_tid = 0x12e0 Thread: id = 532 os_tid = 0x12d8 Thread: id = 533 os_tid = 0x12d4 Thread: id = 534 os_tid = 0x634 Thread: id = 535 os_tid = 0x620 Thread: id = 536 os_tid = 0x618 Thread: id = 537 os_tid = 0x610 Thread: id = 538 os_tid = 0x5ec Process: id = "26" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4f046000" os_pid = "0x69c" os_integrity_level = "0x4000" os_privileges = "0x860814080" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k wsappx" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AppXSvc" [0xe], "NT SERVICE\\ClipSVC" [0xa], "NT AUTHORITY\\Logon Session 00000000:0001205b" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 539 os_tid = 0x7d0 Thread: id = 540 os_tid = 0x6b4 Thread: id = 541 os_tid = 0x6b0 Thread: id = 542 os_tid = 0x6a8 Thread: id = 543 os_tid = 0x6a0 Thread: id = 603 os_tid = 0x7b8 Process: id = "27" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4dab9000" os_pid = "0x720" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k UnistackSvcGroup" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000fd03" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 544 os_tid = 0x1218 Thread: id = 545 os_tid = 0x1084 Thread: id = 546 os_tid = 0xcc4 Thread: id = 547 os_tid = 0x6d4 Thread: id = 548 os_tid = 0x74c Thread: id = 549 os_tid = 0x7dc Thread: id = 550 os_tid = 0x7b4 Thread: id = 551 os_tid = 0x76c Thread: id = 552 os_tid = 0x768 Thread: id = 553 os_tid = 0x754 Thread: id = 554 os_tid = 0x750 Thread: id = 555 os_tid = 0x748 Thread: id = 556 os_tid = 0x724 Process: id = "28" image_name = "officeclicktorun.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officeclicktorun.exe" page_root = "0x465e2000" os_pid = "0x818" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" /service" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "BUILTIN\\Administrators" [0xe], "Everyone" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7] Thread: id = 557 os_tid = 0x12dc Thread: id = 558 os_tid = 0xfa4 Thread: id = 559 os_tid = 0xf6c Thread: id = 560 os_tid = 0xe80 Thread: id = 561 os_tid = 0xe68 Thread: id = 562 os_tid = 0xb6c Thread: id = 563 os_tid = 0xa68 Thread: id = 564 os_tid = 0xa48 Thread: id = 565 os_tid = 0xa3c Thread: id = 566 os_tid = 0xa04 Thread: id = 567 os_tid = 0xa00 Thread: id = 568 os_tid = 0x9f4 Thread: id = 569 os_tid = 0x9f0 Thread: id = 570 os_tid = 0x9ec Thread: id = 571 os_tid = 0x9e4 Thread: id = 572 os_tid = 0x9c8 Thread: id = 573 os_tid = 0x858 Thread: id = 574 os_tid = 0x828 Thread: id = 575 os_tid = 0x81c Process: id = "29" image_name = "securityhealthservice.exe" filename = "c:\\windows\\system32\\securityhealthservice.exe" page_root = "0x4aae8000" os_pid = "0x84c" os_integrity_level = "0x4000" os_privileges = "0x20900080" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\SecurityHealthService.exe" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "S-1-5-80-259296475-4084429506-1152984619-38739575-565535606" [0xe], "NT AUTHORITY\\Logon Session 00000000:000180f8" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 576 os_tid = 0x994 Thread: id = 577 os_tid = 0x990 Thread: id = 578 os_tid = 0x98c Thread: id = 579 os_tid = 0x8d4 Thread: id = 580 os_tid = 0x850 Process: id = "30" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x58ae000" os_pid = "0x1104" os_integrity_level = "0x4000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k LocalServiceAndNoImpersonation" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BthHFSrv" [0xa], "NT SERVICE\\FDResPub" [0xa], "NT SERVICE\\QWAVE" [0xa], "NT SERVICE\\SCardSvr" [0xa], "NT SERVICE\\SensrSvc" [0xa], "NT SERVICE\\SSDPSRV" [0xe], "NT SERVICE\\upnphost" [0xa], "NT SERVICE\\wcncsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0005c82d" [0xc000000f], "LOCAL" [0x7] Thread: id = 581 os_tid = 0x1134 Thread: id = 582 os_tid = 0x1130 Thread: id = 583 os_tid = 0x1128 Thread: id = 584 os_tid = 0x1120 Thread: id = 585 os_tid = 0x111c Thread: id = 586 os_tid = 0x1118 Thread: id = 587 os_tid = 0x1114 Thread: id = 588 os_tid = 0x1108 Process: id = "31" image_name = "sppsvc.exe" filename = "c:\\windows\\system32\\sppsvc.exe" page_root = "0x17d51000" os_pid = "0xe70" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\sppsvc.exe" cur_dir = "C:\\WINDOWS" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\sppsvc" [0xe], "NT AUTHORITY\\Logon Session 00000000:000847f5" [0xc000000f], "LOCAL" [0x7] Thread: id = 589 os_tid = 0xcd8 Thread: id = 590 os_tid = 0xcf4 Thread: id = 591 os_tid = 0xe08 Thread: id = 592 os_tid = 0x53c [0265.334] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0265.334] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8280ff950, Length=0x48, ResultLength=0x0) [0265.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0265.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0265.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) Thread: id = 593 os_tid = 0x760 [0216.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e720, Length=0x50, ResultLength=0x0) [0216.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e650, Length=0x38, ResultLength=0x0) [0216.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e480, Length=0x28, ResultLength=0x0) [0216.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e480, Length=0x28, ResultLength=0x0) [0216.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e480, Length=0x28, ResultLength=0x0) [0216.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e480, Length=0x28, ResultLength=0x0) [0216.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4f0, Length=0x28, ResultLength=0x0) [0216.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e650, Length=0x38, ResultLength=0x0) [0216.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0216.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e570, Length=0x28, ResultLength=0x0) [0222.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e570, Length=0x28, ResultLength=0x0) [0222.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e650, Length=0x38, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4d0, Length=0x20, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e450, Length=0x20, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e450, Length=0x20, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e450, Length=0x20, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e650, Length=0x38, ResultLength=0x0) [0222.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4d0, Length=0x20, ResultLength=0x0) [0222.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e460, Length=0x20, ResultLength=0x0) [0222.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e460, Length=0x20, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x50, ResultLength=0x0) [0222.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0222.446] _wcsicmp (_String1="SPPSVC\\$$global$$", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0222.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x50, ResultLength=0x0) [0222.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x50, ResultLength=0x0) [0222.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x50, ResultLength=0x0) [0222.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x38, ResultLength=0x0) [0222.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0222.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0222.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0222.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0222.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x28, ResultLength=0x0) [0222.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x38, ResultLength=0x0) [0222.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0222.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x38, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e690, Length=0x20, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0222.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x38, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e690, Length=0x20, ResultLength=0x0) [0222.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e620, Length=0x20, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e620, Length=0x20, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x50, ResultLength=0x0) [0222.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0222.457] _wcsicmp (_String1="SPPSVC\\$$global$$", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0222.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x50, ResultLength=0x0) [0222.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x50, ResultLength=0x0) [0222.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x50, ResultLength=0x0) [0222.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x38, ResultLength=0x0) [0222.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0222.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x28, ResultLength=0x0) [0222.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x38, ResultLength=0x0) [0222.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0222.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0222.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x38, ResultLength=0x0) [0222.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e690, Length=0x20, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x38, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e690, Length=0x20, ResultLength=0x0) [0222.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e620, Length=0x20, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e620, Length=0x20, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0222.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb80, Length=0x48, ResultLength=0x0) [0222.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea00, Length=0x40, ResultLength=0x0) [0225.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x50, ResultLength=0x0) [0225.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x50, ResultLength=0x0) [0225.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x50, ResultLength=0x0) [0225.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5a0, Length=0x50, ResultLength=0x0) [0225.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5a0, Length=0x50, ResultLength=0x0) [0225.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5a0, Length=0x50, ResultLength=0x0) [0225.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5a0, Length=0x50, ResultLength=0x0) [0225.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4d0, Length=0x38, ResultLength=0x0) [0225.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e300, Length=0x28, ResultLength=0x0) [0225.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e300, Length=0x28, ResultLength=0x0) [0225.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e300, Length=0x28, ResultLength=0x0) [0225.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e300, Length=0x28, ResultLength=0x0) [0225.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e370, Length=0x28, ResultLength=0x0) [0225.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4d0, Length=0x38, ResultLength=0x0) [0225.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x28, ResultLength=0x0) [0225.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x28, ResultLength=0x0) [0225.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x20, ResultLength=0x0) [0225.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e210, Length=0x20, ResultLength=0x0) [0225.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e210, Length=0x20, ResultLength=0x0) [0225.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e210, Length=0x20, ResultLength=0x0) [0225.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4d0, Length=0x38, ResultLength=0x0) [0225.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4d0, Length=0x38, ResultLength=0x0) [0225.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e350, Length=0x20, ResultLength=0x0) [0225.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e2e0, Length=0x20, ResultLength=0x0) [0225.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e2e0, Length=0x20, ResultLength=0x0) [0225.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.672] GetProcessHeap () returned 0x298cddd0000 [0225.672] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ce9d8c70 [0225.677] GetProcessHeap () returned 0x298cddd0000 [0225.677] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cde1be70 [0225.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecd0, Length=0x50, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecd0, Length=0x50, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecd0, Length=0x50, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebc0, Length=0x50, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebc0, Length=0x50, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebc0, Length=0x50, ResultLength=0x0) [0225.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebc0, Length=0x50, ResultLength=0x0) [0225.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x38, ResultLength=0x0) [0225.819] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.819] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x28, ResultLength=0x0) [0225.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x28, ResultLength=0x0) [0225.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x28, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x28, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e990, Length=0x28, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x38, ResultLength=0x0) [0225.822] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.822] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea10, Length=0x28, ResultLength=0x0) [0225.825] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.826] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.826] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.826] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea10, Length=0x28, ResultLength=0x0) [0225.826] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0225.826] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0225.826] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.826] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0225.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0225.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x38, ResultLength=0x0) [0225.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x38, ResultLength=0x0) [0225.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x20, ResultLength=0x0) [0225.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0225.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0225.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.830] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.830] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x50, ResultLength=0x0) [0225.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x50, ResultLength=0x0) [0225.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x50, ResultLength=0x0) [0225.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x50, ResultLength=0x0) [0225.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x50, ResultLength=0x0) [0225.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x50, ResultLength=0x0) [0225.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x50, ResultLength=0x0) [0225.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d960, Length=0x38, ResultLength=0x0) [0225.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0225.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0225.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0225.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0225.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d800, Length=0x28, ResultLength=0x0) [0225.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d960, Length=0x38, ResultLength=0x0) [0225.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x28, ResultLength=0x0) [0225.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x28, ResultLength=0x0) [0225.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d720, Length=0x20, ResultLength=0x0) [0225.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6a0, Length=0x20, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6a0, Length=0x20, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6a0, Length=0x20, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d960, Length=0x38, ResultLength=0x0) [0225.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d960, Length=0x38, ResultLength=0x0) [0225.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7e0, Length=0x20, ResultLength=0x0) [0225.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x20, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x20, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd90, Length=0x50, ResultLength=0x0) [0225.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd90, Length=0x50, ResultLength=0x0) [0225.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd90, Length=0x50, ResultLength=0x0) [0225.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc80, Length=0x50, ResultLength=0x0) [0225.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc80, Length=0x50, ResultLength=0x0) [0225.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc80, Length=0x50, ResultLength=0x0) [0225.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc80, Length=0x50, ResultLength=0x0) [0225.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbb0, Length=0x38, ResultLength=0x0) [0225.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9e0, Length=0x28, ResultLength=0x0) [0225.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9e0, Length=0x28, ResultLength=0x0) [0225.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9e0, Length=0x28, ResultLength=0x0) [0225.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x28, ResultLength=0x0) [0225.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbb0, Length=0x38, ResultLength=0x0) [0225.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x28, ResultLength=0x0) [0225.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x28, ResultLength=0x0) [0225.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbb0, Length=0x38, ResultLength=0x0) [0225.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x20, ResultLength=0x0) [0225.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9b0, Length=0x20, ResultLength=0x0) [0225.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9b0, Length=0x20, ResultLength=0x0) [0225.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9b0, Length=0x20, ResultLength=0x0) [0225.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbb0, Length=0x38, ResultLength=0x0) [0225.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x20, ResultLength=0x0) [0225.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9c0, Length=0x20, ResultLength=0x0) [0225.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9c0, Length=0x20, ResultLength=0x0) [0225.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd90, Length=0x50, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd90, Length=0x50, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd90, Length=0x50, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc80, Length=0x50, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc80, Length=0x50, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc80, Length=0x50, ResultLength=0x0) [0225.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc80, Length=0x50, ResultLength=0x0) [0225.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbb0, Length=0x38, ResultLength=0x0) [0225.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9e0, Length=0x28, ResultLength=0x0) [0225.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9e0, Length=0x28, ResultLength=0x0) [0225.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9e0, Length=0x28, ResultLength=0x0) [0225.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x28, ResultLength=0x0) [0225.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbb0, Length=0x38, ResultLength=0x0) [0225.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x28, ResultLength=0x0) [0225.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x28, ResultLength=0x0) [0225.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbb0, Length=0x38, ResultLength=0x0) [0225.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x20, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9b0, Length=0x20, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9b0, Length=0x20, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9b0, Length=0x20, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbb0, Length=0x38, ResultLength=0x0) [0225.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x20, ResultLength=0x0) [0225.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9c0, Length=0x20, ResultLength=0x0) [0225.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9c0, Length=0x20, ResultLength=0x0) [0225.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807de40, Length=0x50, ResultLength=0x0) [0225.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ddc0, Length=0x28, ResultLength=0x0) [0225.982] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0225.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807de40, Length=0x50, ResultLength=0x0) [0225.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807de40, Length=0x50, ResultLength=0x0) [0225.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807de40, Length=0x50, ResultLength=0x0) [0225.983] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.983] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd70, Length=0x38, ResultLength=0x0) [0225.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x28, ResultLength=0x0) [0225.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x28, ResultLength=0x0) [0225.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x28, ResultLength=0x0) [0225.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc10, Length=0x28, ResultLength=0x0) [0225.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd70, Length=0x38, ResultLength=0x0) [0225.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc90, Length=0x28, ResultLength=0x0) [0225.994] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.994] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.995] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.995] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.995] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.995] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.995] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc90, Length=0x28, ResultLength=0x0) [0225.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd70, Length=0x38, ResultLength=0x0) [0225.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x20, ResultLength=0x0) [0225.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db70, Length=0x20, ResultLength=0x0) [0225.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db70, Length=0x20, ResultLength=0x0) [0225.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db70, Length=0x20, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd70, Length=0x38, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x20, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db80, Length=0x20, ResultLength=0x0) [0225.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db80, Length=0x20, ResultLength=0x0) [0225.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.999] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.999] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807de40, Length=0x50, ResultLength=0x0) [0225.999] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ddc0, Length=0x28, ResultLength=0x0) [0225.999] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0225.999] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.999] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.999] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807de40, Length=0x50, ResultLength=0x0) [0225.999] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0225.999] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807de40, Length=0x50, ResultLength=0x0) [0226.000] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.000] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807de40, Length=0x50, ResultLength=0x0) [0226.000] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.000] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd70, Length=0x38, ResultLength=0x0) [0226.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.101] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x28, ResultLength=0x0) [0226.101] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.101] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.101] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x28, ResultLength=0x0) [0226.101] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.101] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.102] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x28, ResultLength=0x0) [0226.102] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.102] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.102] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc10, Length=0x28, ResultLength=0x0) [0226.102] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.102] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.103] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd70, Length=0x38, ResultLength=0x0) [0226.103] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.103] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc90, Length=0x28, ResultLength=0x0) [0226.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc90, Length=0x28, ResultLength=0x0) [0226.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd70, Length=0x38, ResultLength=0x0) [0226.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x20, ResultLength=0x0) [0226.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db70, Length=0x20, ResultLength=0x0) [0226.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db70, Length=0x20, ResultLength=0x0) [0226.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db70, Length=0x20, ResultLength=0x0) [0226.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd70, Length=0x38, ResultLength=0x0) [0226.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x20, ResultLength=0x0) [0226.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db80, Length=0x20, ResultLength=0x0) [0226.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db80, Length=0x20, ResultLength=0x0) [0226.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.111] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8e0, Length=0x50, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8e0, Length=0x50, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8e0, Length=0x50, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x50, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x50, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x50, ResultLength=0x0) [0226.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x50, ResultLength=0x0) [0226.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d700, Length=0x38, ResultLength=0x0) [0226.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x28, ResultLength=0x0) [0226.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x28, ResultLength=0x0) [0226.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x28, ResultLength=0x0) [0226.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x28, ResultLength=0x0) [0226.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0226.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d700, Length=0x38, ResultLength=0x0) [0226.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x28, ResultLength=0x0) [0226.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x28, ResultLength=0x0) [0226.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x20, ResultLength=0x0) [0226.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0226.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0226.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0226.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d700, Length=0x38, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d700, Length=0x38, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x20, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x20, ResultLength=0x0) [0226.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x20, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db30, Length=0x50, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db30, Length=0x50, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db30, Length=0x50, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x50, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x50, ResultLength=0x0) [0226.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x50, ResultLength=0x0) [0226.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x50, ResultLength=0x0) [0226.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x38, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x28, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x28, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x28, ResultLength=0x0) [0226.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7f0, Length=0x28, ResultLength=0x0) [0226.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x38, ResultLength=0x0) [0226.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d870, Length=0x28, ResultLength=0x0) [0226.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d870, Length=0x28, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x38, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x20, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x20, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x20, ResultLength=0x0) [0226.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x38, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x20, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x20, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db30, Length=0x50, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db30, Length=0x50, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db30, Length=0x50, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x50, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x50, ResultLength=0x0) [0226.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x50, ResultLength=0x0) [0226.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x50, ResultLength=0x0) [0226.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x38, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x28, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x28, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x28, ResultLength=0x0) [0226.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7f0, Length=0x28, ResultLength=0x0) [0226.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x38, ResultLength=0x0) [0226.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d870, Length=0x28, ResultLength=0x0) [0226.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d870, Length=0x28, ResultLength=0x0) [0226.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x38, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x20, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x20, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x20, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x38, ResultLength=0x0) [0226.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x20, ResultLength=0x0) [0226.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x20, ResultLength=0x0) [0226.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x50, ResultLength=0x0) [0226.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db60, Length=0x28, ResultLength=0x0) [0226.270] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0226.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x50, ResultLength=0x0) [0226.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x50, ResultLength=0x0) [0226.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x50, ResultLength=0x0) [0226.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db10, Length=0x38, ResultLength=0x0) [0226.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d940, Length=0x28, ResultLength=0x0) [0226.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d940, Length=0x28, ResultLength=0x0) [0226.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d940, Length=0x28, ResultLength=0x0) [0226.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9b0, Length=0x28, ResultLength=0x0) [0226.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db10, Length=0x38, ResultLength=0x0) [0226.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x28, ResultLength=0x0) [0226.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x28, ResultLength=0x0) [0226.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db10, Length=0x38, ResultLength=0x0) [0226.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0226.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d910, Length=0x20, ResultLength=0x0) [0226.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d910, Length=0x20, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d910, Length=0x20, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db10, Length=0x38, ResultLength=0x0) [0226.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x50, ResultLength=0x0) [0226.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db60, Length=0x28, ResultLength=0x0) [0226.286] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0226.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x50, ResultLength=0x0) [0226.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x50, ResultLength=0x0) [0226.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x50, ResultLength=0x0) [0226.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db10, Length=0x38, ResultLength=0x0) [0226.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d940, Length=0x28, ResultLength=0x0) [0226.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d940, Length=0x28, ResultLength=0x0) [0226.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d940, Length=0x28, ResultLength=0x0) [0226.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9b0, Length=0x28, ResultLength=0x0) [0226.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.296] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db10, Length=0x38, ResultLength=0x0) [0226.296] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.296] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x28, ResultLength=0x0) [0226.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da30, Length=0x28, ResultLength=0x0) [0226.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db10, Length=0x38, ResultLength=0x0) [0226.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0226.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d910, Length=0x20, ResultLength=0x0) [0226.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d910, Length=0x20, ResultLength=0x0) [0226.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d910, Length=0x20, ResultLength=0x0) [0226.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db10, Length=0x38, ResultLength=0x0) [0226.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0226.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0226.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0226.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x50, ResultLength=0x0) [0226.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x50, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x50, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x50, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x50, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x50, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x50, ResultLength=0x0) [0226.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x38, ResultLength=0x0) [0226.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0226.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0226.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0226.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0226.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x28, ResultLength=0x0) [0226.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x38, ResultLength=0x0) [0226.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x28, ResultLength=0x0) [0226.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x28, ResultLength=0x0) [0226.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x38, ResultLength=0x0) [0226.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x38, ResultLength=0x0) [0226.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x20, ResultLength=0x0) [0226.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0226.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0226.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x50, ResultLength=0x0) [0226.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x50, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x50, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x50, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x50, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x50, ResultLength=0x0) [0226.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x50, ResultLength=0x0) [0226.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x38, ResultLength=0x0) [0226.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0226.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0226.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x28, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x38, ResultLength=0x0) [0226.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x28, ResultLength=0x0) [0226.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x28, ResultLength=0x0) [0226.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0226.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x38, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x38, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x20, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0226.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.634] GetProcessHeap () returned 0x298cddd0000 [0226.634] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cde26300 [0226.634] GetProcessHeap () returned 0x298cddd0000 [0226.634] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cde74b40 [0226.635] GetProcessHeap () returned 0x298cddd0000 [0226.635] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x124) returned 0x298cdde38f0 [0226.638] GetProcessHeap () returned 0x298cddd0000 [0226.638] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x130) returned 0x298cde76810 [0226.638] GetProcessHeap () returned 0x298cddd0000 [0226.638] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298ce9f14d0 [0226.638] GetProcessHeap () returned 0x298cddd0000 [0226.638] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x138) returned 0x298cea53db0 [0226.638] GetProcessHeap () returned 0x298cddd0000 [0226.638] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cde26670 [0226.638] GetProcessHeap () returned 0x298cddd0000 [0226.638] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cde74b20 [0226.638] GetProcessHeap () returned 0x298cddd0000 [0226.638] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ce9d8eb0 | out: hHeap=0x298cddd0000) returned 1 [0226.638] GetProcessHeap () returned 0x298cddd0000 [0226.638] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x1ec) returned 0x298ce9d8eb0 [0226.639] GetProcessHeap () returned 0x298cddd0000 [0226.639] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x1000f4) returned 0x298cebe8040 [0226.645] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807dad8 | out: phModule=0xb82807dad8*=0x7ffcea380000) returned 1 [0226.645] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0226.645] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807dc00, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807dc00, ResultLength=0x0) returned 0x0 [0226.731] GetProcessHeap () returned 0x298cddd0000 [0226.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298ce9f1510 [0226.731] GetProcessHeap () returned 0x298cddd0000 [0226.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x2d30) returned 0x298cde7b5d0 [0226.731] GetProcessHeap () returned 0x298cddd0000 [0226.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cde25c20 [0226.732] GetProcessHeap () returned 0x298cddd0000 [0226.732] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cde74a70 [0226.733] GetProcessHeap () returned 0x298cddd0000 [0226.733] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x2d1c) returned 0x298cde81040 [0226.733] GetProcessHeap () returned 0x298cddd0000 [0226.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde76810 | out: hHeap=0x298cddd0000) returned 1 [0226.734] GetProcessHeap () returned 0x298cddd0000 [0226.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cea53db0 | out: hHeap=0x298cddd0000) returned 1 [0226.734] GetProcessHeap () returned 0x298cddd0000 [0226.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde26670 | out: hHeap=0x298cddd0000) returned 1 [0226.734] GetProcessHeap () returned 0x298cddd0000 [0226.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde74b20 | out: hHeap=0x298cddd0000) returned 1 [0226.734] GetProcessHeap () returned 0x298cddd0000 [0226.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ce9f14d0 | out: hHeap=0x298cddd0000) returned 1 [0226.734] GetProcessHeap () returned 0x298cddd0000 [0226.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ce9d8eb0 | out: hHeap=0x298cddd0000) returned 1 [0226.734] GetProcessHeap () returned 0x298cddd0000 [0226.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cebe8040 | out: hHeap=0x298cddd0000) returned 1 [0226.737] GetProcessHeap () returned 0x298cddd0000 [0226.737] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde7b5d0 | out: hHeap=0x298cddd0000) returned 1 [0226.737] GetProcessHeap () returned 0x298cddd0000 [0226.737] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde25c20 | out: hHeap=0x298cddd0000) returned 1 [0226.737] GetProcessHeap () returned 0x298cddd0000 [0226.737] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde74a70 | out: hHeap=0x298cddd0000) returned 1 [0226.737] GetProcessHeap () returned 0x298cddd0000 [0226.737] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ce9f1510 | out: hHeap=0x298cddd0000) returned 1 [0226.737] GetProcessHeap () returned 0x298cddd0000 [0226.737] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde7e310 | out: hHeap=0x298cddd0000) returned 1 [0226.738] GetProcessHeap () returned 0x298cddd0000 [0226.738] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdde38f0 | out: hHeap=0x298cddd0000) returned 1 [0226.738] GetProcessHeap () returned 0x298cddd0000 [0226.738] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde81040 | out: hHeap=0x298cddd0000) returned 1 [0226.738] GetProcessHeap () returned 0x298cddd0000 [0226.738] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde26300 | out: hHeap=0x298cddd0000) returned 1 [0226.738] GetProcessHeap () returned 0x298cddd0000 [0226.738] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde74b40 | out: hHeap=0x298cddd0000) returned 1 [0226.739] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.740] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0226.742] LocalAlloc (uFlags=0x0, uBytes=0x118) returned 0x298cde76810 [0226.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0226.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc30, Length=0x30, ResultLength=0x0) [0226.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x30, ResultLength=0x0) [0226.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x30, ResultLength=0x0) [0226.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.748] GetProcessHeap () returned 0x298cddd0000 [0226.748] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x2c) returned 0x298ce9f1510 [0226.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.754] GetProcessHeap () returned 0x298cddd0000 [0226.754] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde30e60 [0226.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.756] GetProcessHeap () returned 0x298cddd0000 [0226.756] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde32440 [0226.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.760] GetProcessHeap () returned 0x298cddd0000 [0226.760] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x30) returned 0x298ce9f1550 [0226.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.765] GetProcessHeap () returned 0x298cddd0000 [0226.765] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde324b0 [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.768] GetProcessHeap () returned 0x298cddd0000 [0226.768] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x76) returned 0x298cde67290 [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.833] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.838] GetProcessHeap () returned 0x298cddd0000 [0226.838] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x30) returned 0x298ce9f1590 [0226.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.842] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.842] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.842] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.842] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.842] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.842] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.843] GetProcessHeap () returned 0x298cddd0000 [0226.844] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x30) returned 0x298cde78450 [0226.844] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.844] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.844] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.844] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.845] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.847] GetProcessHeap () returned 0x298cddd0000 [0226.847] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde32520 [0226.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.850] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.850] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.850] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.850] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.850] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.851] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.852] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.854] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.854] GetProcessHeap () returned 0x298cddd0000 [0226.854] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x4e) returned 0x298cde7aa50 [0226.854] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.854] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.858] GetProcessHeap () returned 0x298cddd0000 [0226.858] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x3e) returned 0x298cde729a0 [0226.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.862] GetProcessHeap () returned 0x298cddd0000 [0226.862] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x3e) returned 0x298cde72a40 [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.871] GetProcessHeap () returned 0x298cddd0000 [0226.871] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x3e) returned 0x298cde73440 [0226.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.875] GetProcessHeap () returned 0x298cddd0000 [0226.875] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x3e) returned 0x298cde725e0 [0226.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.932] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.932] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.932] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.932] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.934] GetProcessHeap () returned 0x298cddd0000 [0226.934] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde31b80 [0226.934] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.934] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.936] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.936] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.936] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.936] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.936] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.938] GetProcessHeap () returned 0x298cddd0000 [0226.938] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x4e) returned 0x298cde7aab0 [0226.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.941] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.941] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.941] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.941] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.941] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.941] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.941] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.941] GetProcessHeap () returned 0x298cddd0000 [0226.941] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde30990 [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.945] GetProcessHeap () returned 0x298cddd0000 [0226.945] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x4a) returned 0x298cde7a330 [0226.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.948] GetProcessHeap () returned 0x298cddd0000 [0226.948] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde30ed0 [0226.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.953] GetProcessHeap () returned 0x298cddd0000 [0226.953] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x4c) returned 0x298cde7a090 [0226.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.958] GetProcessHeap () returned 0x298cddd0000 [0226.958] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde30a00 [0226.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.962] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.964] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.964] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.964] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.964] GetProcessHeap () returned 0x298cddd0000 [0226.964] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde30ca0 [0226.964] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.964] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.964] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.967] GetProcessHeap () returned 0x298cddd0000 [0226.967] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x2c) returned 0x298cde77990 [0226.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.970] GetProcessHeap () returned 0x298cddd0000 [0226.970] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde311e0 [0226.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.973] GetProcessHeap () returned 0x298cddd0000 [0226.973] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5a) returned 0x298cde31330 [0226.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0226.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.975] GetProcessHeap () returned 0x298cddd0000 [0226.975] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x2c) returned 0x298cde77ad0 [0226.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0226.976] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.022] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.022] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.022] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.022] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.023] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.023] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.023] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.023] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.023] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0227.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.025] GetProcessHeap () returned 0x298cddd0000 [0227.025] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x2c) returned 0x298cde77b50 [0227.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0227.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.029] GetProcessHeap () returned 0x298cddd0000 [0227.029] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x2c) returned 0x298cde777d0 [0227.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0227.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.035] GetProcessHeap () returned 0x298cddd0000 [0227.035] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x2e) returned 0x298cde77c10 [0227.035] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.035] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.036] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.036] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.036] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.036] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.036] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0227.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.040] GetProcessHeap () returned 0x298cddd0000 [0227.040] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x5c) returned 0x298cde313a0 [0227.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0227.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.046] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.046] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.046] GetProcessHeap () returned 0x298cddd0000 [0227.046] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x22) returned 0x298cde74160 [0227.046] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.047] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.047] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.047] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.047] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.047] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.047] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.047] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.048] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.048] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.048] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.048] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.048] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.048] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.049] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.049] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.049] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.049] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.050] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.050] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.050] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.051] GetProcessHeap () returned 0x298cddd0000 [0227.051] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x6) returned 0x298cde74a70 [0227.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.057] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.057] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.057] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.057] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.057] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0227.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.119] GetProcessHeap () returned 0x298cddd0000 [0227.119] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x76) returned 0x298cde66f90 [0227.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.125] GetProcessHeap () returned 0x298cddd0000 [0227.125] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18c) returned 0x298ce9d8eb0 [0227.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.130] GetProcessHeap () returned 0x298cddd0000 [0227.131] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x8) returned 0x298cde74b40 [0227.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.136] GetProcessHeap () returned 0x298cddd0000 [0227.136] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x1e0) returned 0x298cea53db0 [0227.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x20, ResultLength=0x0) [0227.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d998, Length=0x30, ResultLength=0x0) [0227.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da68, Length=0x30, ResultLength=0x0) [0227.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x30, ResultLength=0x0) [0227.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x28, ResultLength=0x0) [0227.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x18, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.272] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.272] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.272] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.272] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.272] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.273] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.273] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.273] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x38, ResultLength=0x0) [0227.273] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.273] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.273] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.274] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\wwapi.dll", hFile=0x0, dwFlags=0x0) returned 0x7ffcd5220000 [0227.291] GetProcAddress (hModule=0x7ffcd5220000, lpProcName="WwanOpenHandle") returned 0x7ffcd5221040 [0227.292] GetProcAddress (hModule=0x7ffcd5220000, lpProcName="WwanCloseHandle") returned 0x7ffcd5226170 [0227.292] GetProcAddress (hModule=0x7ffcd5220000, lpProcName="WwanEnumerateInterfaces") returned 0x7ffcd52270e0 [0227.292] GetProcAddress (hModule=0x7ffcd5220000, lpProcName="WwanQueryInterface") returned 0x7ffcd5228e60 [0227.292] GetProcAddress (hModule=0x7ffcd5220000, lpProcName="WwanFreeMemory") returned 0x7ffcd522cbc0 [0227.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.293] WwanOpenHandle () returned 0x426 [0227.401] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x20, ResultLength=0x0) [0227.402] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.402] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.402] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x28, ResultLength=0x0) [0227.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x18, ResultLength=0x0) [0227.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da70, Length=0x28, ResultLength=0x0) [0227.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db18, Length=0x30, ResultLength=0x0) [0227.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0227.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x28, ResultLength=0x0) [0227.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x18, ResultLength=0x0) [0227.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x28, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x18, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x28, ResultLength=0x0) [0227.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x28, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x18, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x28, ResultLength=0x0) [0227.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.660] GetCurrentHwProfileW (in: lpHwProfileInfo=0xb82807dae0 | out: lpHwProfileInfo=0xb82807dae0) returned 1 [0227.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x38, ResultLength=0x0) [0227.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbc0, Length=0x28, ResultLength=0x0) [0227.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x28, ResultLength=0x0) [0227.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x38, ResultLength=0x0) [0227.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba8, Length=0x38, ResultLength=0x0) [0227.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x38, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x30, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x28, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x30, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x38, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d910, Length=0x30, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x28, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d910, Length=0x30, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.691] memchr (_Buf=0x298cea53de0, _Val=0, _MaxCount=0x1af) returned 0x298cea53de8 [0227.691] memchr (_Buf=0x298cea53de9, _Val=0, _MaxCount=0x1a6) returned 0x298cea53df4 [0227.691] memchr (_Buf=0x298cea53df5, _Val=0, _MaxCount=0x19a) returned 0x298cea53e01 [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.692] memchr (_Buf=0x298cea53e1e, _Val=0, _MaxCount=0x171) returned 0x298cea53e26 [0227.692] memchr (_Buf=0x298cea53e27, _Val=0, _MaxCount=0x168) returned 0x298cea53e30 [0227.692] memchr (_Buf=0x298cea53e31, _Val=0, _MaxCount=0x15e) returned 0x298cea53e42 [0227.692] memchr (_Buf=0x298cea53e43, _Val=0, _MaxCount=0x14c) returned 0x298cea53e4c [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.693] memchr (_Buf=0x298cea53e5d, _Val=0, _MaxCount=0x132) returned 0x298cea53e65 [0227.693] memchr (_Buf=0x298cea53e66, _Val=0, _MaxCount=0x129) returned 0x298cea53e6e [0227.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.694] memchr (_Buf=0x298cea53e86, _Val=0, _MaxCount=0x109) returned 0x298cea53e8e [0227.694] memchr (_Buf=0x298cea53e8f, _Val=0, _MaxCount=0x100) returned 0x298cea53ea9 [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.694] memchr (_Buf=0x298cea53ed5, _Val=0, _MaxCount=0xba) returned 0x298cea53ed7 [0227.694] memchr (_Buf=0x298cea53ed8, _Val=0, _MaxCount=0xb7) returned 0x298cea53ee6 [0227.694] memchr (_Buf=0x298cea53ee7, _Val=0, _MaxCount=0xa8) returned 0x298cea53f11 [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.695] memchr (_Buf=0x298cea53f2a, _Val=0, _MaxCount=0x65) returned 0x298cea53f2a [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.696] memchr (_Buf=0x298cea53f54, _Val=0, _MaxCount=0x3b) returned 0x298cea53f5a [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.697] memchr (_Buf=0x298cea53f7b, _Val=0, _MaxCount=0x14) returned 0x298cea53f7b [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.697] memchr (_Buf=0x298cea53f88, _Val=0, _MaxCount=0x7) returned 0x298cea53f88 [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.698] memchr (_Buf=0x298cea53f8e, _Val=0, _MaxCount=0x1) returned 0x298cea53f8e [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x38, ResultLength=0x0) [0227.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x38, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x38, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbf0, Length=0x28, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x20, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db88, Length=0x38, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x30, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8a0, Length=0x28, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x30, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.704] memchr (_Buf=0x298cea53de0, _Val=0, _MaxCount=0x1af) returned 0x298cea53de8 [0227.704] memchr (_Buf=0x298cea53de9, _Val=0, _MaxCount=0x1a6) returned 0x298cea53df4 [0227.704] memchr (_Buf=0x298cea53df5, _Val=0, _MaxCount=0x19a) returned 0x298cea53e01 [0227.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.705] memchr (_Buf=0x298cea53e1e, _Val=0, _MaxCount=0x171) returned 0x298cea53e26 [0227.705] memchr (_Buf=0x298cea53e27, _Val=0, _MaxCount=0x168) returned 0x298cea53e30 [0227.705] memchr (_Buf=0x298cea53e31, _Val=0, _MaxCount=0x15e) returned 0x298cea53e42 [0227.705] memchr (_Buf=0x298cea53e43, _Val=0, _MaxCount=0x14c) returned 0x298cea53e4c [0227.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.706] memchr (_Buf=0x298cea53e5d, _Val=0, _MaxCount=0x132) returned 0x298cea53e65 [0227.707] memchr (_Buf=0x298cea53e66, _Val=0, _MaxCount=0x129) returned 0x298cea53e6e [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x38, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db88, Length=0x38, ResultLength=0x0) [0227.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0227.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc40, Length=0x20, ResultLength=0x0) [0227.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x20, ResultLength=0x0) [0227.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x20, ResultLength=0x0) [0227.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9e0, Length=0x20, ResultLength=0x0) [0227.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0227.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.814] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.816] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.817] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.832] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.832] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.832] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.832] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.833] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.913] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.913] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.913] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.914] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.929] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.929] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.929] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.929] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.934] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.934] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.934] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.934] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.935] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9e0, Length=0x20, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0227.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0227.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0227.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0227.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0227.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0227.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0227.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0227.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0227.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0227.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.066] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.273] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0228.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x20, ResultLength=0x0) [0228.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x20, ResultLength=0x0) [0228.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0228.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0228.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0228.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0228.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dba0, Length=0x20, ResultLength=0x0) [0228.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db30, Length=0x20, ResultLength=0x0) [0228.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0228.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dcb8, Length=0x30, ResultLength=0x0) [0228.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db20, Length=0x20, ResultLength=0x0) [0228.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0228.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x20, ResultLength=0x0) [0228.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d920, Length=0x20, ResultLength=0x0) [0228.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x20, ResultLength=0x0) [0228.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x20, ResultLength=0x0) [0228.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dde0, Length=0x28, ResultLength=0x0) [0228.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd28, Length=0x28, ResultLength=0x0) [0228.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd28, Length=0x28, ResultLength=0x0) [0228.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd28, Length=0x28, ResultLength=0x0) [0228.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd28, Length=0x28, ResultLength=0x0) [0228.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd28, Length=0x28, ResultLength=0x0) [0228.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd28, Length=0x28, ResultLength=0x0) [0228.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd28, Length=0x28, ResultLength=0x0) [0228.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc90, Length=0x20, ResultLength=0x0) [0228.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc90, Length=0x20, ResultLength=0x0) [0228.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dd28, Length=0x28, ResultLength=0x0) [0228.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db50, Length=0x20, ResultLength=0x0) [0228.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db50, Length=0x20, ResultLength=0x0) [0228.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc00, Length=0x20, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc00, Length=0x20, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc00, Length=0x20, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dc30, Length=0x20, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbd0, Length=0x20, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbd0, Length=0x20, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dab0, Length=0x28, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x48, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x28, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x28, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db78, Length=0x48, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dac0, Length=0x48, ResultLength=0x0) [0228.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x28, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x28, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dca0, Length=0x40, ResultLength=0x0) [0228.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x50, ResultLength=0x0) [0228.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x50, ResultLength=0x0) [0228.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x50, ResultLength=0x0) [0228.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x50, ResultLength=0x0) [0228.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x50, ResultLength=0x0) [0228.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x50, ResultLength=0x0) [0228.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x50, ResultLength=0x0) [0228.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x38, ResultLength=0x0) [0228.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0228.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0228.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0228.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x28, ResultLength=0x0) [0228.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x38, ResultLength=0x0) [0228.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x28, ResultLength=0x0) [0228.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x28, ResultLength=0x0) [0228.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x38, ResultLength=0x0) [0228.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x20, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x20, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x20, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x38, ResultLength=0x0) [0228.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0228.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x50, ResultLength=0x0) [0228.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x50, ResultLength=0x0) [0228.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d990, Length=0x50, ResultLength=0x0) [0228.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x50, ResultLength=0x0) [0228.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x50, ResultLength=0x0) [0228.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x50, ResultLength=0x0) [0228.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x50, ResultLength=0x0) [0228.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x38, ResultLength=0x0) [0228.674] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.674] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0228.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0228.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0228.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x28, ResultLength=0x0) [0228.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x38, ResultLength=0x0) [0228.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x28, ResultLength=0x0) [0228.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x28, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x38, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x20, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x20, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x20, ResultLength=0x0) [0228.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x38, ResultLength=0x0) [0228.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0228.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0228.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.989] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x50, ResultLength=0x0) [0228.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9c0, Length=0x28, ResultLength=0x0) [0228.990] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0228.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x50, ResultLength=0x0) [0228.990] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x50, ResultLength=0x0) [0228.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x50, ResultLength=0x0) [0228.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.991] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0228.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x28, ResultLength=0x0) [0228.996] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x28, ResultLength=0x0) [0228.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x28, ResultLength=0x0) [0228.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x28, ResultLength=0x0) [0228.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0228.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0228.998] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d890, Length=0x28, ResultLength=0x0) [0229.006] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d890, Length=0x28, ResultLength=0x0) [0229.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7f0, Length=0x20, ResultLength=0x0) [0229.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x20, ResultLength=0x0) [0229.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x20, ResultLength=0x0) [0229.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x20, ResultLength=0x0) [0229.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7f0, Length=0x20, ResultLength=0x0) [0229.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.011] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.011] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.011] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.011] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.011] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.011] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.011] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x50, ResultLength=0x0) [0229.011] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9c0, Length=0x28, ResultLength=0x0) [0229.012] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0229.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x50, ResultLength=0x0) [0229.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x50, ResultLength=0x0) [0229.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da40, Length=0x50, ResultLength=0x0) [0229.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.018] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x28, ResultLength=0x0) [0229.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x28, ResultLength=0x0) [0229.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x28, ResultLength=0x0) [0229.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x28, ResultLength=0x0) [0229.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d890, Length=0x28, ResultLength=0x0) [0229.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d890, Length=0x28, ResultLength=0x0) [0229.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7f0, Length=0x20, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x20, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x20, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x20, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7f0, Length=0x20, ResultLength=0x0) [0229.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x48, ResultLength=0x0) [0229.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x48, ResultLength=0x0) [0229.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.131] LocalAlloc (uFlags=0x0, uBytes=0x5a) returned 0x298cde30e60 [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x20, ResultLength=0x0) [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x20, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x20, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da20, Length=0x20, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x28, ResultLength=0x0) [0229.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dbe0, Length=0x48, ResultLength=0x0) [0229.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da88, Length=0x28, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da88, Length=0x28, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da88, Length=0x28, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da88, Length=0x28, ResultLength=0x0) [0229.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da88, Length=0x28, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da88, Length=0x28, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da88, Length=0x28, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x20, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9f0, Length=0x20, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da88, Length=0x28, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x20, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x20, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807daa0, Length=0x20, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807dad0, Length=0x20, ResultLength=0x0) [0229.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da70, Length=0x20, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da70, Length=0x20, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d950, Length=0x28, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d960, Length=0x48, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8c0, Length=0x28, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8c0, Length=0x28, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da18, Length=0x48, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d960, Length=0x48, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8c0, Length=0x28, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8c0, Length=0x28, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.148] LocalAlloc (uFlags=0x0, uBytes=0x82) returned 0x298ce9f5320 [0229.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db40, Length=0x40, ResultLength=0x0) [0229.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x58, ResultLength=0x0) [0229.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da00, Length=0x28, ResultLength=0x0) [0229.372] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0229.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x58, ResultLength=0x0) [0229.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x58, ResultLength=0x0) [0229.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x58, ResultLength=0x0) [0229.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x28, ResultLength=0x0) [0229.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x28, ResultLength=0x0) [0229.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x28, ResultLength=0x0) [0229.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x28, ResultLength=0x0) [0229.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8a0, Length=0x28, ResultLength=0x0) [0229.402] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8a0, Length=0x28, ResultLength=0x0) [0229.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x20, ResultLength=0x0) [0229.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x20, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x20, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x20, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8e0, Length=0x20, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d800, Length=0x20, ResultLength=0x0) [0229.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d800, Length=0x20, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0229.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d970, Length=0x38, ResultLength=0x0) [0229.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d800, Length=0x20, ResultLength=0x0) [0229.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x20, ResultLength=0x0) [0229.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x20, ResultLength=0x0) [0229.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da90, Length=0x58, ResultLength=0x0) [0229.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x20, ResultLength=0x0) [0229.509] GetTickCount () returned 0x1179d1d [0229.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d888, Length=0x58, ResultLength=0x0) [0229.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x38, ResultLength=0x0) [0229.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5d0, Length=0x28, ResultLength=0x0) [0229.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5d0, Length=0x28, ResultLength=0x0) [0229.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5d0, Length=0x28, ResultLength=0x0) [0229.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5d0, Length=0x28, ResultLength=0x0) [0229.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x28, ResultLength=0x0) [0229.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x38, ResultLength=0x0) [0229.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x28, ResultLength=0x0) [0229.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x28, ResultLength=0x0) [0229.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x38, ResultLength=0x0) [0229.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x20, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x20, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x20, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x20, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x38, ResultLength=0x0) [0229.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x20, ResultLength=0x0) [0229.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x20, ResultLength=0x0) [0229.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x20, ResultLength=0x0) [0229.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d888, Length=0x58, ResultLength=0x0) [0229.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x38, ResultLength=0x0) [0229.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0229.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0229.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0229.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0229.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x28, ResultLength=0x0) [0229.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x38, ResultLength=0x0) [0229.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x38, ResultLength=0x0) [0229.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x28, ResultLength=0x0) [0229.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x28, ResultLength=0x0) [0229.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x38, ResultLength=0x0) [0229.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x38, ResultLength=0x0) [0229.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x20, ResultLength=0x0) [0229.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x20, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x38, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x20, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x20, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x20, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x20, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x38, ResultLength=0x0) [0229.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x20, ResultLength=0x0) [0229.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x20, ResultLength=0x0) [0229.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x20, ResultLength=0x0) [0229.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x20, ResultLength=0x0) [0229.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x38, ResultLength=0x0) [0229.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x20, ResultLength=0x0) [0229.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x20, ResultLength=0x0) [0229.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x20, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d888, Length=0x58, ResultLength=0x0) [0229.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x58, ResultLength=0x0) [0229.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0229.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0229.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0229.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x58, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.710] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0229.713] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.713] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0229.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d430, Length=0x20, ResultLength=0x0) [0229.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x20, ResultLength=0x0) [0229.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x20, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x20, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0229.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x58, ResultLength=0x0) [0229.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0229.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0229.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0229.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0229.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0229.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0229.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0229.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x58, ResultLength=0x0) [0229.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x38, ResultLength=0x0) [0229.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0229.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0229.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0229.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0229.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x28, ResultLength=0x0) [0229.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x38, ResultLength=0x0) [0229.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.968] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x38, ResultLength=0x0) [0229.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x28, ResultLength=0x0) [0229.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x28, ResultLength=0x0) [0229.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x38, ResultLength=0x0) [0229.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x38, ResultLength=0x0) [0229.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.975] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.976] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.976] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.976] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x20, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.977] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x20, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x38, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x20, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0229.978] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x38, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x20, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0229.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x20, ResultLength=0x0) [0229.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x38, ResultLength=0x0) [0229.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x20, ResultLength=0x0) [0229.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0229.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0229.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.981] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.982] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.983] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d9d0, Length=0x20, ResultLength=0x0) [0229.984] GetTickCount () returned 0x1179ee2 [0229.984] GetProcessHeap () returned 0x298cddd0000 [0229.984] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cde7fe40 [0229.984] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x30, ResultLength=0x0) [0229.984] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0229.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0229.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0229.985] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0229.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x38, ResultLength=0x0) [0229.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x30, ResultLength=0x0) [0229.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0229.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0229.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x30, ResultLength=0x0) [0229.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d520, Length=0x20, ResultLength=0x0) [0229.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0229.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x30, ResultLength=0x0) [0230.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x30, ResultLength=0x0) [0230.085] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.085] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.085] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.085] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0230.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x30, ResultLength=0x0) [0230.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x18, ResultLength=0x0) [0230.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0230.389] RegFlushKey (hKey=0x334) returned 0x0 [0231.438] NtLockProductActivationKeys (pPrivateVer=0x0, pSafeMode=0x0) returned 0x0 [0231.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0231.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0231.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x38, ResultLength=0x0) [0231.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x30, ResultLength=0x0) [0231.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d520, Length=0x20, ResultLength=0x0) [0231.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x30, ResultLength=0x0) [0231.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x30, ResultLength=0x0) [0231.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x28, ResultLength=0x0) [0231.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x28, ResultLength=0x0) [0231.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7d0, Length=0x58, ResultLength=0x0) [0231.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x38, ResultLength=0x0) [0231.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0231.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0231.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0231.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0231.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0231.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x38, ResultLength=0x0) [0231.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x38, ResultLength=0x0) [0231.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0231.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0231.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x38, ResultLength=0x0) [0231.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x38, ResultLength=0x0) [0231.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x20, ResultLength=0x0) [0231.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x20, ResultLength=0x0) [0231.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x20, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x20, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x38, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x38, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x38, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d700, Length=0x40, ResultLength=0x0) [0231.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.722] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.722] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.722] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.726] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.727] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.727] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.727] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.727] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.739] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.739] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.740] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.740] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.740] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.740] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d700, Length=0x40, ResultLength=0x0) [0231.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d700, Length=0x40, ResultLength=0x0) [0231.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.748] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.748] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0231.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0231.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0231.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0232.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0232.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0232.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0232.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x38, ResultLength=0x0) [0232.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0232.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d700, Length=0x40, ResultLength=0x0) [0232.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.385] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.400] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.400] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.400] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.400] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.400] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.401] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.401] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.401] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.401] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.402] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.402] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.402] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.402] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0232.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.957] GetProcessHeap () returned 0x298cddd0000 [0241.957] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde43c0 [0241.957] GetProcessHeap () returned 0x298cddd0000 [0241.957] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cec8f110 [0241.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.960] GetProcessHeap () returned 0x298cddd0000 [0241.960] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceb0a600 [0241.960] GetProcessHeap () returned 0x298cddd0000 [0241.960] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cecadfc0 [0241.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.960] GetProcessHeap () returned 0x298cddd0000 [0241.961] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde44b0 [0241.961] GetProcessHeap () returned 0x298cddd0000 [0241.961] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cec90730 [0241.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.961] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.963] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.964] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.964] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.979] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0241.980] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.192] GetProcessHeap () returned 0x298cddd0000 [0242.192] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4ff0 [0242.193] GetProcessHeap () returned 0x298cddd0000 [0242.193] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298ced71750 [0242.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.196] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.198] GetProcessHeap () returned 0x298cddd0000 [0242.198] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298cde654b0 [0242.198] GetProcessHeap () returned 0x298cddd0000 [0242.198] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cecaef20 [0242.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.198] GetProcessHeap () returned 0x298cddd0000 [0242.198] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4960 [0242.198] GetProcessHeap () returned 0x298cddd0000 [0242.198] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298ced719b0 [0242.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0242.201] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.201] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.201] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.393] GetProcessHeap () returned 0x298cddd0000 [0242.393] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde5950 [0242.393] GetProcessHeap () returned 0x298cddd0000 [0242.393] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cee184a0 [0242.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.743] GetProcessHeap () returned 0x298cddd0000 [0242.743] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298cebc8270 [0242.743] GetProcessHeap () returned 0x298cddd0000 [0242.743] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cecafa30 [0242.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.744] GetProcessHeap () returned 0x298cddd0000 [0242.744] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4690 [0242.744] GetProcessHeap () returned 0x298cddd0000 [0242.744] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cee18cc0 [0242.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0242.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.767] GetProcessHeap () returned 0x298cddd0000 [0242.767] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde43c0 [0242.767] GetProcessHeap () returned 0x298cddd0000 [0242.767] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cee19420 [0242.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.769] GetProcessHeap () returned 0x298cddd0000 [0242.769] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298cde654b0 [0242.769] GetProcessHeap () returned 0x298cddd0000 [0242.770] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cecab4d0 [0242.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.770] GetProcessHeap () returned 0x298cddd0000 [0242.770] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde41e0 [0242.770] GetProcessHeap () returned 0x298cddd0000 [0242.770] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cee16440 [0242.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0242.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.946] GetProcessHeap () returned 0x298cddd0000 [0242.946] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4e10 [0242.946] GetProcessHeap () returned 0x298cddd0000 [0242.946] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298ceebcfe0 [0242.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.948] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.948] GetProcessHeap () returned 0x298cddd0000 [0242.948] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceb39230 [0242.949] GetProcessHeap () returned 0x298cddd0000 [0242.949] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cee96020 [0242.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.949] GetProcessHeap () returned 0x298cddd0000 [0242.949] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde5950 [0242.949] GetProcessHeap () returned 0x298cddd0000 [0242.949] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298ceeb7960 [0242.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0242.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.968] GetProcessHeap () returned 0x298cddd0000 [0242.968] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4960 [0242.968] GetProcessHeap () returned 0x298cddd0000 [0242.968] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298ceeb78e0 [0242.969] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.970] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.971] GetProcessHeap () returned 0x298cddd0000 [0242.971] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceb39230 [0242.971] GetProcessHeap () returned 0x298cddd0000 [0242.971] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cee91e50 [0242.971] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.971] GetProcessHeap () returned 0x298cddd0000 [0242.972] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde51d0 [0242.972] GetProcessHeap () returned 0x298cddd0000 [0242.972] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298ceebc2c0 [0242.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0242.973] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0242.974] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.729] GetProcessHeap () returned 0x298cddd0000 [0243.729] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde41e0 [0243.729] GetProcessHeap () returned 0x298cddd0000 [0243.729] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef8dd70 [0243.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.733] GetProcessHeap () returned 0x298cddd0000 [0243.733] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceb39230 [0243.733] GetProcessHeap () returned 0x298cddd0000 [0243.733] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cee92540 [0243.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.734] GetProcessHeap () returned 0x298cddd0000 [0243.734] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde3d30 [0243.734] GetProcessHeap () returned 0x298cddd0000 [0243.734] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef8db10 [0243.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0243.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.743] GetProcessHeap () returned 0x298cddd0000 [0243.743] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde3f10 [0243.744] GetProcessHeap () returned 0x298cddd0000 [0243.744] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef8e370 [0243.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.745] GetProcessHeap () returned 0x298cddd0000 [0243.745] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceb39230 [0243.746] GetProcessHeap () returned 0x298cddd0000 [0243.746] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cee92270 [0243.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.746] GetProcessHeap () returned 0x298cddd0000 [0243.746] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde52c0 [0243.746] GetProcessHeap () returned 0x298cddd0000 [0243.746] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef8e690 [0243.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0243.748] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.748] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.748] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.748] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.749] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.889] GetProcessHeap () returned 0x298cddd0000 [0243.889] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde41e0 [0243.889] GetProcessHeap () returned 0x298cddd0000 [0243.889] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef8e0f0 [0243.889] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.892] GetProcessHeap () returned 0x298cddd0000 [0243.892] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298cefa9840 [0243.892] GetProcessHeap () returned 0x298cddd0000 [0243.892] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cee96050 [0243.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.893] GetProcessHeap () returned 0x298cddd0000 [0243.893] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde5950 [0243.893] GetProcessHeap () returned 0x298cddd0000 [0243.893] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef98d90 [0243.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.993] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.993] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0243.994] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.994] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.995] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.995] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.995] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0243.997] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x50, ResultLength=0x0) [0244.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x50, ResultLength=0x0) [0244.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x50, ResultLength=0x0) [0244.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x50, ResultLength=0x0) [0244.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x50, ResultLength=0x0) [0244.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x50, ResultLength=0x0) [0244.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x50, ResultLength=0x0) [0244.015] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.015] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x38, ResultLength=0x0) [0244.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.023] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0244.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0244.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0244.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0244.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x28, ResultLength=0x0) [0244.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x38, ResultLength=0x0) [0244.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x28, ResultLength=0x0) [0244.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x28, ResultLength=0x0) [0244.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x20, ResultLength=0x0) [0244.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0244.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0244.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0244.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x38, ResultLength=0x0) [0244.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x38, ResultLength=0x0) [0244.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0244.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d230, Length=0x20, ResultLength=0x0) [0244.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d230, Length=0x20, ResultLength=0x0) [0244.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d850, Length=0x50, ResultLength=0x0) [0244.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d850, Length=0x50, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d850, Length=0x50, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x50, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x50, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x50, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x50, ResultLength=0x0) [0244.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0244.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0244.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0244.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0244.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0244.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0244.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0244.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0244.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0244.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0244.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0244.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0244.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0244.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0244.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0244.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0244.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0244.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.158] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d850, Length=0x50, ResultLength=0x0) [0244.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d850, Length=0x50, ResultLength=0x0) [0244.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d850, Length=0x50, ResultLength=0x0) [0244.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x50, ResultLength=0x0) [0244.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x50, ResultLength=0x0) [0244.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x50, ResultLength=0x0) [0244.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x50, ResultLength=0x0) [0244.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0244.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0244.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0244.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0244.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0244.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0244.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0244.275] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0244.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x38, ResultLength=0x0) [0244.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4f0, Length=0x20, ResultLength=0x0) [0244.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0244.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0244.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d900, Length=0x50, ResultLength=0x0) [0244.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x28, ResultLength=0x0) [0244.281] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0244.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d900, Length=0x50, ResultLength=0x0) [0244.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d900, Length=0x50, ResultLength=0x0) [0244.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d900, Length=0x50, ResultLength=0x0) [0244.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d830, Length=0x38, ResultLength=0x0) [0244.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0244.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0244.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0244.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x28, ResultLength=0x0) [0244.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d830, Length=0x38, ResultLength=0x0) [0244.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x28, ResultLength=0x0) [0244.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x28, ResultLength=0x0) [0244.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d830, Length=0x38, ResultLength=0x0) [0244.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6b0, Length=0x20, ResultLength=0x0) [0244.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0244.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0244.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0244.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d830, Length=0x38, ResultLength=0x0) [0244.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6b0, Length=0x20, ResultLength=0x0) [0244.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x20, ResultLength=0x0) [0244.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x20, ResultLength=0x0) [0244.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d900, Length=0x50, ResultLength=0x0) [0244.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d880, Length=0x28, ResultLength=0x0) [0244.303] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0244.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d900, Length=0x50, ResultLength=0x0) [0244.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d900, Length=0x50, ResultLength=0x0) [0244.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d900, Length=0x50, ResultLength=0x0) [0244.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d830, Length=0x38, ResultLength=0x0) [0244.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0244.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0244.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0244.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x28, ResultLength=0x0) [0244.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d830, Length=0x38, ResultLength=0x0) [0244.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x28, ResultLength=0x0) [0244.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d750, Length=0x28, ResultLength=0x0) [0244.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d830, Length=0x38, ResultLength=0x0) [0244.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6b0, Length=0x20, ResultLength=0x0) [0244.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0244.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0244.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x20, ResultLength=0x0) [0244.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d830, Length=0x38, ResultLength=0x0) [0244.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6b0, Length=0x20, ResultLength=0x0) [0244.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x20, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x20, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0244.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0244.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0244.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0244.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d100, Length=0x28, ResultLength=0x0) [0244.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0244.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0244.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0244.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0244.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0244.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0244.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0244.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x20, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.538] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0244.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0244.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0244.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0244.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d100, Length=0x28, ResultLength=0x0) [0244.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0244.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0244.867] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.867] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.867] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0244.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0244.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0244.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0244.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0244.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0244.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0244.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x20, ResultLength=0x0) [0244.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0244.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0244.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0244.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0244.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0244.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0244.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0244.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.882] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0244.882] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.882] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.882] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0244.882] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.882] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.883] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0244.883] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.883] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.883] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0244.883] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.883] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0244.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.889] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.889] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.889] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.889] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.889] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0244.889] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0244.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x20, ResultLength=0x0) [0244.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0244.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0244.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0244.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0244.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x20, ResultLength=0x0) [0244.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0244.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0244.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0244.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0244.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0244.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0244.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0244.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0244.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0244.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0244.901] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0244.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0244.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0244.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0244.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0244.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0244.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0244.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.050] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.050] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x20, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0245.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0245.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x20, ResultLength=0x0) [0245.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0245.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0245.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0245.054] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5d0, Length=0x28, ResultLength=0x0) [0245.055] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0245.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0245.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0245.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.055] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0245.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.056] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0245.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0245.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0245.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0245.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0245.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0245.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0245.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0245.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0245.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0245.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0245.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0245.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x40, ResultLength=0x0) [0245.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0245.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0245.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0245.097] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.097] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0245.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d508, Length=0x30, ResultLength=0x0) [0245.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0245.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0245.209] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0245.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x28, ResultLength=0x0) [0245.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.218] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0245.224] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.225] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.225] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.225] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.225] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.225] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.226] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0245.226] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfd0, Length=0x20, ResultLength=0x0) [0245.226] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf50, Length=0x20, ResultLength=0x0) [0245.226] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.226] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf50, Length=0x20, ResultLength=0x0) [0245.226] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.226] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf50, Length=0x20, ResultLength=0x0) [0245.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0245.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0245.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0245.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0245.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0245.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0245.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0245.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0245.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d508, Length=0x30, ResultLength=0x0) [0245.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0245.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0245.235] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0245.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.237] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.237] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x28, ResultLength=0x0) [0245.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0245.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0245.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0245.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0245.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0245.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0245.360] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0245.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0245.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0245.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x28, ResultLength=0x0) [0245.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0245.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0245.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0245.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0245.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0245.492] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0245.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0245.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0245.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0245.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0245.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0245.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0245.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0245.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0245.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0245.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0245.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0245.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0245.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0245.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfd0, Length=0x28, ResultLength=0x0) [0245.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0245.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0245.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0245.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cef0, Length=0x20, ResultLength=0x0) [0245.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0245.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0245.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0245.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0245.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0245.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfb0, Length=0x20, ResultLength=0x0) [0245.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0245.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0245.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0245.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0245.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0245.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0245.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfd0, Length=0x28, ResultLength=0x0) [0245.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0245.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0245.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0245.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cef0, Length=0x20, ResultLength=0x0) [0245.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0245.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0245.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfb0, Length=0x20, ResultLength=0x0) [0245.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0245.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0245.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x28, ResultLength=0x0) [0245.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0245.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0245.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0245.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0245.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0245.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0245.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x20, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x20, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6f0, Length=0x20, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6f0, Length=0x20, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6f0, Length=0x20, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d720, Length=0x20, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x20, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x20, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0245.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x48, ResultLength=0x0) [0245.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0245.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0245.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x48, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0245.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0245.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0245.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0245.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0245.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0245.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0245.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0245.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0245.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0245.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.986] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0245.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0245.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.987] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0245.988] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0246.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x28, ResultLength=0x0) [0246.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0246.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0246.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.035] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.036] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0246.036] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.036] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0246.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d120, Length=0x20, ResultLength=0x0) [0246.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0246.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d120, Length=0x20, ResultLength=0x0) [0246.038] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x20, ResultLength=0x0) [0246.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x20, ResultLength=0x0) [0246.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0246.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0246.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0246.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0246.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0246.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0246.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0246.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0246.050] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0246.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0246.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0246.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x28, ResultLength=0x0) [0246.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0246.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0246.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0246.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0246.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d120, Length=0x20, ResultLength=0x0) [0246.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0246.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d120, Length=0x20, ResultLength=0x0) [0246.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x20, ResultLength=0x0) [0246.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x20, ResultLength=0x0) [0246.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0246.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x28, ResultLength=0x0) [0246.064] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0246.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0246.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0246.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0246.066] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.066] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0246.185] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.186] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0246.186] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.186] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.186] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0246.186] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0246.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x28, ResultLength=0x0) [0246.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0246.188] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.188] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0246.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0246.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0246.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x20, ResultLength=0x0) [0246.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0246.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0246.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0246.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.208] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0246.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x20, ResultLength=0x0) [0246.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x20, ResultLength=0x0) [0246.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x20, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0246.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x28, ResultLength=0x0) [0246.211] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0246.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0246.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0246.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0246.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0246.220] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.220] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0246.220] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.220] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.220] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0246.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0246.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x28, ResultLength=0x0) [0246.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0246.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0246.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0246.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0246.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x20, ResultLength=0x0) [0246.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0246.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0246.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0246.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0246.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x20, ResultLength=0x0) [0246.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x20, ResultLength=0x0) [0246.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x20, ResultLength=0x0) [0246.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d748, Length=0x50, ResultLength=0x0) [0246.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x28, ResultLength=0x0) [0246.346] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0246.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d748, Length=0x50, ResultLength=0x0) [0246.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d748, Length=0x50, ResultLength=0x0) [0246.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x50, ResultLength=0x0) [0246.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x28, ResultLength=0x0) [0246.346] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0246.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x50, ResultLength=0x0) [0246.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x50, ResultLength=0x0) [0246.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x50, ResultLength=0x0) [0246.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.349] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x38, ResultLength=0x0) [0246.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x28, ResultLength=0x0) [0246.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x28, ResultLength=0x0) [0246.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x28, ResultLength=0x0) [0246.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x28, ResultLength=0x0) [0246.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x38, ResultLength=0x0) [0246.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x28, ResultLength=0x0) [0246.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x28, ResultLength=0x0) [0246.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x38, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x20, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x38, ResultLength=0x0) [0246.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x20, ResultLength=0x0) [0246.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0246.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0246.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.484] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb82807d690 | out: lpSystemTimeAsFileTime=0xb82807d690*(dwLowDateTime=0xd189746a, dwHighDateTime=0x1d61c67)) [0246.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d748, Length=0x50, ResultLength=0x0) [0246.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x28, ResultLength=0x0) [0246.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d598, Length=0x50, ResultLength=0x0) [0246.485] GetTickCount () returned 0x117df56 [0246.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d468, Length=0x58, ResultLength=0x0) [0246.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0246.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0246.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0246.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0246.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0246.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d220, Length=0x28, ResultLength=0x0) [0246.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0246.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.491] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0246.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d468, Length=0x58, ResultLength=0x0) [0246.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0246.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0246.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0246.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0246.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0246.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0246.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0246.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0246.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0246.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x20, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0246.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0246.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0246.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0246.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0246.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0246.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0246.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0246.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0246.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0246.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0246.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0246.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d468, Length=0x58, ResultLength=0x0) [0246.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x58, ResultLength=0x0) [0246.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x28, ResultLength=0x0) [0246.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0246.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0246.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0246.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0246.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0246.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0246.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0246.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x58, ResultLength=0x0) [0246.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x28, ResultLength=0x0) [0246.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0246.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0246.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0246.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf90, Length=0x20, ResultLength=0x0) [0246.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf90, Length=0x20, ResultLength=0x0) [0246.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf90, Length=0x20, ResultLength=0x0) [0246.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0246.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x58, ResultLength=0x0) [0246.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x28, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.919] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.919] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0246.924] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.924] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.924] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.925] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.925] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.925] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0246.925] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.925] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0246.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x58, ResultLength=0x0) [0246.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0246.932] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.932] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0246.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0246.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0246.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0246.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x28, ResultLength=0x0) [0246.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0246.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0246.940] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.941] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x28, ResultLength=0x0) [0246.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x28, ResultLength=0x0) [0246.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.952] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0246.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0246.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfb0, Length=0x20, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf30, Length=0x20, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf30, Length=0x20, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf30, Length=0x20, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0246.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0246.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0246.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0246.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0246.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0246.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0246.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0246.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d030, Length=0x20, ResultLength=0x0) [0246.958] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d030, Length=0x20, ResultLength=0x0) [0246.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.959] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d598, Length=0x50, ResultLength=0x0) [0246.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.960] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0246.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0246.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0246.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.965] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0246.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0246.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.966] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x28, ResultLength=0x0) [0246.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0246.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0246.967] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x28, ResultLength=0x0) [0246.972] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.067] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.068] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x28, ResultLength=0x0) [0247.068] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.068] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.068] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0247.068] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0247.068] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0247.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0247.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x20, ResultLength=0x0) [0247.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x20, ResultLength=0x0) [0247.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0247.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0247.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0247.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0247.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0247.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0247.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x28, ResultLength=0x0) [0247.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0247.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0247.087] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.088] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.088] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.088] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0247.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x20, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x20, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.092] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0247.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d428, Length=0x50, ResultLength=0x0) [0247.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0247.114] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0247.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0247.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0247.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0247.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0247.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0247.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0247.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0247.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0247.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0247.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0247.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d738, Length=0x50, ResultLength=0x0) [0247.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6b0, Length=0x28, ResultLength=0x0) [0247.127] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0247.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d738, Length=0x50, ResultLength=0x0) [0247.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d738, Length=0x50, ResultLength=0x0) [0247.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x50, ResultLength=0x0) [0247.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0247.234] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0247.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x50, ResultLength=0x0) [0247.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x50, ResultLength=0x0) [0247.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x50, ResultLength=0x0) [0247.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x38, ResultLength=0x0) [0247.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0247.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0247.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0247.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3f0, Length=0x28, ResultLength=0x0) [0247.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.244] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.244] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x38, ResultLength=0x0) [0247.244] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.244] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0247.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0247.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x38, ResultLength=0x0) [0247.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x20, ResultLength=0x0) [0247.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0247.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0247.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0247.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.261] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x38, ResultLength=0x0) [0247.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x20, ResultLength=0x0) [0247.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0247.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.262] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0247.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.263] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.264] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb82807d680 | out: lpSystemTimeAsFileTime=0xb82807d680*(dwLowDateTime=0xd200aaa4, dwHighDateTime=0x1d61c67)) [0247.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d738, Length=0x50, ResultLength=0x0) [0247.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x28, ResultLength=0x0) [0247.264] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d588, Length=0x50, ResultLength=0x0) [0247.264] GetTickCount () returned 0x117e264 [0247.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d458, Length=0x58, ResultLength=0x0) [0247.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0247.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0247.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0247.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0247.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0247.386] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x28, ResultLength=0x0) [0247.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.387] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0247.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.388] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0247.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0247.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0247.395] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x20, ResultLength=0x0) [0247.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0247.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0247.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0247.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0247.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x20, ResultLength=0x0) [0247.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0247.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0247.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d458, Length=0x58, ResultLength=0x0) [0247.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0247.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0247.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0247.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0247.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0247.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x28, ResultLength=0x0) [0247.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0247.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0247.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0247.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0247.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0247.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0247.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0247.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.431] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0247.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0247.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0247.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0247.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0247.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0247.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d458, Length=0x58, ResultLength=0x0) [0247.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x58, ResultLength=0x0) [0247.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x28, ResultLength=0x0) [0247.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0247.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0247.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0247.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0247.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0247.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0247.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0247.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x58, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x28, ResultLength=0x0) [0247.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0247.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0247.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d000, Length=0x20, ResultLength=0x0) [0247.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf80, Length=0x20, ResultLength=0x0) [0247.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf80, Length=0x20, ResultLength=0x0) [0247.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf80, Length=0x20, ResultLength=0x0) [0247.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0247.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x58, ResultLength=0x0) [0247.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0247.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x28, ResultLength=0x0) [0247.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0247.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0247.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0247.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0247.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0247.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0247.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x58, ResultLength=0x0) [0247.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0247.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.680] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.681] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.681] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0247.681] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.681] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.683] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x28, ResultLength=0x0) [0247.683] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.683] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.683] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0247.683] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.683] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0247.684] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.684] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0247.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0247.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0247.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0247.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0247.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf20, Length=0x20, ResultLength=0x0) [0247.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf20, Length=0x20, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf20, Length=0x20, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0247.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0247.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0247.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0247.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0247.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0247.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0247.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0247.694] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0247.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0247.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0247.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0247.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0247.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0247.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d588, Length=0x50, ResultLength=0x0) [0247.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0247.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0247.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0247.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0247.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0247.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x28, ResultLength=0x0) [0247.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.703] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0247.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0247.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x28, ResultLength=0x0) [0248.039] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x28, ResultLength=0x0) [0248.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.041] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0248.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x20, ResultLength=0x0) [0248.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0248.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0248.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0248.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.042] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0248.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x20, ResultLength=0x0) [0248.043] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0248.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0248.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.044] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.045] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.046] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d430, Length=0x50, ResultLength=0x0) [0248.046] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.046] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x38, ResultLength=0x0) [0248.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0248.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x28, ResultLength=0x0) [0248.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x38, ResultLength=0x0) [0248.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x28, ResultLength=0x0) [0248.057] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.058] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x28, ResultLength=0x0) [0248.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x38, ResultLength=0x0) [0248.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x20, ResultLength=0x0) [0248.059] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0248.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0248.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0248.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x38, ResultLength=0x0) [0248.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x20, ResultLength=0x0) [0248.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0248.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0248.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.063] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0248.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d418, Length=0x50, ResultLength=0x0) [0248.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0248.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0248.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0248.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0248.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x28, ResultLength=0x0) [0248.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0248.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0248.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0248.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0248.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0248.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0248.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0248.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0248.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0248.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0248.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0248.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.079] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.080] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.080] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0248.080] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.080] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.080] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.080] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.080] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.081] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.081] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.081] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0248.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d720, Length=0x28, ResultLength=0x0) [0248.287] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0248.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0248.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0248.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0248.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0248.296] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0248.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0248.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0248.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0248.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0248.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0248.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0248.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0248.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0248.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0248.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0248.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0248.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0248.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0248.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0248.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.305] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.305] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.305] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0248.305] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.305] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.305] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.305] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0248.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d720, Length=0x28, ResultLength=0x0) [0248.306] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0248.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0248.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0248.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0248.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0248.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0248.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0248.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0248.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0248.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0248.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0248.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0248.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0248.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0248.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0248.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0248.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0248.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0248.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0248.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0248.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0248.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0248.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0248.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0248.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0248.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0248.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0248.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0248.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0248.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0248.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0248.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0248.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0248.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfd0, Length=0x28, ResultLength=0x0) [0248.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0248.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0248.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0248.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cef0, Length=0x20, ResultLength=0x0) [0248.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0248.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0248.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0248.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0248.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0248.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfb0, Length=0x20, ResultLength=0x0) [0248.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0248.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0248.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0248.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0248.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0248.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0248.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0248.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0248.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0248.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0248.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0248.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0248.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0248.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0248.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfd0, Length=0x28, ResultLength=0x0) [0248.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0248.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0248.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0248.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cef0, Length=0x20, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0248.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0248.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfb0, Length=0x20, ResultLength=0x0) [0248.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0248.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0248.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8d0, Length=0x28, ResultLength=0x0) [0248.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0248.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0248.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0248.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0248.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0248.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x20, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d818, Length=0x28, ResultLength=0x0) [0248.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x20, ResultLength=0x0) [0248.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d640, Length=0x20, ResultLength=0x0) [0248.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6f0, Length=0x20, ResultLength=0x0) [0248.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6f0, Length=0x20, ResultLength=0x0) [0248.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6f0, Length=0x20, ResultLength=0x0) [0248.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d720, Length=0x20, ResultLength=0x0) [0248.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x20, ResultLength=0x0) [0248.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x20, ResultLength=0x0) [0248.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.622] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x48, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d668, Length=0x48, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x48, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0248.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x40, ResultLength=0x0) [0248.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.631] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0248.632] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.632] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0248.632] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.632] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0248.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0248.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0248.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0248.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0248.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0248.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0248.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0248.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0248.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x28, ResultLength=0x0) [0248.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0248.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0248.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0248.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0248.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d120, Length=0x20, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0248.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d120, Length=0x20, ResultLength=0x0) [0248.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x20, ResultLength=0x0) [0248.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x20, ResultLength=0x0) [0248.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0248.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0248.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x50, ResultLength=0x0) [0248.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0248.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0248.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0248.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x50, ResultLength=0x0) [0248.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0248.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0248.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0248.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x28, ResultLength=0x0) [0248.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x28, ResultLength=0x0) [0248.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0248.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0248.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0248.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0248.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d120, Length=0x20, ResultLength=0x0) [0248.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0248.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x38, ResultLength=0x0) [0248.772] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d120, Length=0x20, ResultLength=0x0) [0248.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x20, ResultLength=0x0) [0248.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x20, ResultLength=0x0) [0248.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x28, ResultLength=0x0) [0248.775] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0248.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0248.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0248.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0248.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0248.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0248.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x28, ResultLength=0x0) [0248.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0248.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0248.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x20, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x20, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x20, ResultLength=0x0) [0248.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x20, ResultLength=0x0) [0248.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0248.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0249.051] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x28, ResultLength=0x0) [0249.052] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0249.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0249.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0249.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.052] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x50, ResultLength=0x0) [0249.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.053] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0249.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0249.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0249.060] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0249.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.061] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x28, ResultLength=0x0) [0249.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0249.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0249.070] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.071] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0249.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0249.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x20, ResultLength=0x0) [0249.072] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0249.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0249.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x20, ResultLength=0x0) [0249.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x38, ResultLength=0x0) [0249.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x20, ResultLength=0x0) [0249.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x20, ResultLength=0x0) [0249.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x20, ResultLength=0x0) [0249.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d748, Length=0x50, ResultLength=0x0) [0249.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x28, ResultLength=0x0) [0249.076] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0249.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d748, Length=0x50, ResultLength=0x0) [0249.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d748, Length=0x50, ResultLength=0x0) [0249.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x50, ResultLength=0x0) [0249.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x28, ResultLength=0x0) [0249.077] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0249.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x50, ResultLength=0x0) [0249.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x50, ResultLength=0x0) [0249.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x50, ResultLength=0x0) [0249.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.078] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x38, ResultLength=0x0) [0249.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x28, ResultLength=0x0) [0249.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x28, ResultLength=0x0) [0249.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x28, ResultLength=0x0) [0249.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x28, ResultLength=0x0) [0249.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x38, ResultLength=0x0) [0249.085] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.085] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x28, ResultLength=0x0) [0249.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x28, ResultLength=0x0) [0249.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x38, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x20, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.096] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x38, ResultLength=0x0) [0249.097] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x20, ResultLength=0x0) [0249.097] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0249.097] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.097] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x20, ResultLength=0x0) [0249.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.193] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb82807d690 | out: lpSystemTimeAsFileTime=0xb82807d690*(dwLowDateTime=0xd3284ca4, dwHighDateTime=0x1d61c67)) [0249.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d748, Length=0x50, ResultLength=0x0) [0249.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d680, Length=0x28, ResultLength=0x0) [0249.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d598, Length=0x50, ResultLength=0x0) [0249.194] GetTickCount () returned 0x117e9f5 [0249.194] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d468, Length=0x58, ResultLength=0x0) [0249.194] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.194] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0249.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0249.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0249.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0249.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0249.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.201] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d220, Length=0x28, ResultLength=0x0) [0249.201] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.201] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.201] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0249.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0249.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.214] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.214] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.214] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0249.214] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.214] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.215] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0249.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0249.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0249.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0249.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.218] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.219] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d468, Length=0x58, ResultLength=0x0) [0249.219] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.219] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0249.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0249.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0249.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0249.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0249.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0249.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0249.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0249.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0249.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0249.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0249.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0249.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x20, ResultLength=0x0) [0249.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0249.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0249.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0249.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0249.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0249.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0249.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d468, Length=0x58, ResultLength=0x0) [0249.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x58, ResultLength=0x0) [0249.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x28, ResultLength=0x0) [0249.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0249.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0249.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0249.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.363] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.363] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x58, ResultLength=0x0) [0249.377] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x28, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0249.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.389] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.390] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0249.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0249.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf90, Length=0x20, ResultLength=0x0) [0249.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf90, Length=0x20, ResultLength=0x0) [0249.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf90, Length=0x20, ResultLength=0x0) [0249.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.393] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x58, ResultLength=0x0) [0249.394] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d080, Length=0x28, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x28, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.498] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0249.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0249.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0249.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0249.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0249.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0249.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x38, ResultLength=0x0) [0249.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0249.506] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.507] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x58, ResultLength=0x0) [0249.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0249.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0249.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0249.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0249.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0249.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x28, ResultLength=0x0) [0249.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0249.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0249.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x28, ResultLength=0x0) [0249.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.531] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x28, ResultLength=0x0) [0249.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0249.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0249.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfb0, Length=0x20, ResultLength=0x0) [0249.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf30, Length=0x20, ResultLength=0x0) [0249.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf30, Length=0x20, ResultLength=0x0) [0249.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf30, Length=0x20, ResultLength=0x0) [0249.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0249.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0249.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0249.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0a0, Length=0x20, ResultLength=0x0) [0249.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d030, Length=0x20, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d030, Length=0x20, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d598, Length=0x50, ResultLength=0x0) [0249.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0249.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0249.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0249.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0249.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0249.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x28, ResultLength=0x0) [0249.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0249.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x28, ResultLength=0x0) [0249.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x28, ResultLength=0x0) [0249.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0249.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0249.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0249.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0249.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x20, ResultLength=0x0) [0249.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x20, ResultLength=0x0) [0249.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0249.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0249.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0249.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0249.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0249.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x28, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0249.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0249.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0249.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x20, ResultLength=0x0) [0249.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0249.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0249.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x20, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.615] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0249.615] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d428, Length=0x50, ResultLength=0x0) [0249.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.616] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0249.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0249.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0249.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0249.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d738, Length=0x50, ResultLength=0x0) [0249.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6b0, Length=0x28, ResultLength=0x0) [0249.723] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0249.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d738, Length=0x50, ResultLength=0x0) [0249.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d738, Length=0x50, ResultLength=0x0) [0249.723] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x50, ResultLength=0x0) [0249.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x28, ResultLength=0x0) [0249.724] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0249.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x50, ResultLength=0x0) [0249.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x50, ResultLength=0x0) [0249.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d620, Length=0x50, ResultLength=0x0) [0249.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x38, ResultLength=0x0) [0249.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0249.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x28, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3f0, Length=0x28, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x38, ResultLength=0x0) [0249.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0249.740] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.740] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.740] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x28, ResultLength=0x0) [0249.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x38, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x20, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x38, ResultLength=0x0) [0249.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x20, ResultLength=0x0) [0249.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0249.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x20, ResultLength=0x0) [0249.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.745] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb82807d680 | out: lpSystemTimeAsFileTime=0xb82807d680*(dwLowDateTime=0xd37bcd42, dwHighDateTime=0x1d61c67)) [0249.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d738, Length=0x50, ResultLength=0x0) [0249.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d670, Length=0x28, ResultLength=0x0) [0249.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d588, Length=0x50, ResultLength=0x0) [0249.745] GetTickCount () returned 0x117ec18 [0249.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d458, Length=0x58, ResultLength=0x0) [0249.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0249.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0249.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0249.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0249.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x28, ResultLength=0x0) [0249.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x28, ResultLength=0x0) [0249.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0249.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.753] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0249.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x28, ResultLength=0x0) [0249.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0249.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x20, ResultLength=0x0) [0249.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0249.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0249.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0249.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x38, ResultLength=0x0) [0249.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x20, ResultLength=0x0) [0249.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0249.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0249.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.766] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d458, Length=0x58, ResultLength=0x0) [0249.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0249.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0250.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.105] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.105] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0250.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0250.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0250.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0250.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x28, ResultLength=0x0) [0250.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0250.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0250.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0250.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0250.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0250.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0250.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0250.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0250.118] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.119] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.120] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0250.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0250.121] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0250.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0250.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d458, Length=0x58, ResultLength=0x0) [0250.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x58, ResultLength=0x0) [0250.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x28, ResultLength=0x0) [0250.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0250.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0250.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0250.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0250.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.137] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0250.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.138] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x58, ResultLength=0x0) [0250.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x28, ResultLength=0x0) [0250.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0250.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0250.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d000, Length=0x20, ResultLength=0x0) [0250.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf80, Length=0x20, ResultLength=0x0) [0250.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf80, Length=0x20, ResultLength=0x0) [0250.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf80, Length=0x20, ResultLength=0x0) [0250.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0250.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x58, ResultLength=0x0) [0250.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.258] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x28, ResultLength=0x0) [0250.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.259] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x28, ResultLength=0x0) [0250.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.260] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0250.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0250.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0250.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0250.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0250.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x20, ResultLength=0x0) [0250.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x38, ResultLength=0x0) [0250.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0250.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.268] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x20, ResultLength=0x0) [0250.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.269] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x58, ResultLength=0x0) [0250.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0250.274] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.274] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0250.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0250.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0250.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0250.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x28, ResultLength=0x0) [0250.280] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0250.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0250.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.281] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0250.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0250.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0250.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0250.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf20, Length=0x20, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf20, Length=0x20, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf20, Length=0x20, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.407] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.408] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x38, ResultLength=0x0) [0250.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0250.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0250.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0250.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d588, Length=0x50, ResultLength=0x0) [0250.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0250.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0250.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.415] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x28, ResultLength=0x0) [0250.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0250.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.416] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x28, ResultLength=0x0) [0250.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x28, ResultLength=0x0) [0250.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x20, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x20, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.424] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.424] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.424] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d430, Length=0x50, ResultLength=0x0) [0250.424] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.424] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x38, ResultLength=0x0) [0250.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0250.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0250.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.428] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0250.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0250.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.429] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x28, ResultLength=0x0) [0250.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x38, ResultLength=0x0) [0250.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.430] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x28, ResultLength=0x0) [0250.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x28, ResultLength=0x0) [0250.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x38, ResultLength=0x0) [0250.435] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x20, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.436] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x38, ResultLength=0x0) [0250.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x20, ResultLength=0x0) [0250.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0250.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.438] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0250.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d418, Length=0x50, ResultLength=0x0) [0250.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0250.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0250.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0250.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x28, ResultLength=0x0) [0250.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x28, ResultLength=0x0) [0250.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0250.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0250.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0250.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0250.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d720, Length=0x28, ResultLength=0x0) [0250.578] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0250.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0250.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0250.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0250.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0250.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0250.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0250.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0250.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0250.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0250.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0250.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0250.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0250.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0250.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0250.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.590] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0250.591] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0250.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0250.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.592] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d720, Length=0x28, ResultLength=0x0) [0250.593] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0250.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7a0, Length=0x50, ResultLength=0x0) [0250.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0250.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0250.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0250.602] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d500, Length=0x28, ResultLength=0x0) [0250.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0250.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0250.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0250.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x28, ResultLength=0x0) [0250.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d0, Length=0x38, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4e0, Length=0x20, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db60, Length=0x50, ResultLength=0x0) [0250.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db60, Length=0x50, ResultLength=0x0) [0250.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807db60, Length=0x50, ResultLength=0x0) [0250.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x50, ResultLength=0x0) [0250.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x50, ResultLength=0x0) [0250.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x50, ResultLength=0x0) [0250.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807da50, Length=0x50, ResultLength=0x0) [0250.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d980, Length=0x38, ResultLength=0x0) [0250.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x28, ResultLength=0x0) [0250.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.724] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x28, ResultLength=0x0) [0250.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x28, ResultLength=0x0) [0250.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.725] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.726] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x28, ResultLength=0x0) [0250.726] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.726] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.726] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x28, ResultLength=0x0) [0250.726] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.726] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.726] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d980, Length=0x38, ResultLength=0x0) [0250.727] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.727] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8a0, Length=0x28, ResultLength=0x0) [0250.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.730] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8a0, Length=0x28, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x20, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x20, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x20, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c0, Length=0x20, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.731] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d980, Length=0x38, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d980, Length=0x38, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d800, Length=0x20, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x20, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x20, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.732] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.833] GetProcessHeap () returned 0x298cddd0000 [0250.833] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4960 [0250.833] GetProcessHeap () returned 0x298cddd0000 [0250.834] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef99bf0 [0250.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.837] GetProcessHeap () returned 0x298cddd0000 [0250.837] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298cefa9840 [0250.837] GetProcessHeap () returned 0x298cddd0000 [0250.837] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cf097380 [0250.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.838] GetProcessHeap () returned 0x298cddd0000 [0250.838] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde43c0 [0250.838] GetProcessHeap () returned 0x298cddd0000 [0250.838] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef99c30 [0250.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8c0, Length=0x50, ResultLength=0x0) [0250.840] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.841] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.843] GetProcessHeap () returned 0x298cddd0000 [0250.843] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde44b0 [0250.843] GetProcessHeap () returned 0x298cddd0000 [0250.843] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef99bf0 [0250.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.844] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.844] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.844] GetProcessHeap () returned 0x298cddd0000 [0250.844] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceffb1e0 [0250.846] GetProcessHeap () returned 0x298cddd0000 [0250.846] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cf096e10 [0250.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.846] GetProcessHeap () returned 0x298cddd0000 [0250.846] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4690 [0250.846] GetProcessHeap () returned 0x298cddd0000 [0250.846] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef9a870 [0250.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8c0, Length=0x50, ResultLength=0x0) [0250.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.853] GetProcessHeap () returned 0x298cddd0000 [0250.853] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4e10 [0250.853] GetProcessHeap () returned 0x298cddd0000 [0250.853] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef9a5b0 [0250.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.854] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.854] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.854] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.854] GetProcessHeap () returned 0x298cddd0000 [0250.854] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceffa6a0 [0250.854] GetProcessHeap () returned 0x298cddd0000 [0250.854] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cf097680 [0250.854] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.855] GetProcessHeap () returned 0x298cddd0000 [0250.855] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde3d30 [0250.855] GetProcessHeap () returned 0x298cddd0000 [0250.855] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef9abf0 [0250.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d930, Length=0x50, ResultLength=0x0) [0250.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0250.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x50, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x50, ResultLength=0x0) [0250.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0250.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.868] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf60, Length=0x28, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfd0, Length=0x28, ResultLength=0x0) [0250.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0250.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0250.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d050, Length=0x28, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cef0, Length=0x20, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ce70, Length=0x20, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x38, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfb0, Length=0x20, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf40, Length=0x20, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x50, ResultLength=0x0) [0250.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x50, ResultLength=0x0) [0250.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x50, ResultLength=0x0) [0250.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x50, ResultLength=0x0) [0250.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x50, ResultLength=0x0) [0250.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x50, ResultLength=0x0) [0250.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x50, ResultLength=0x0) [0250.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0250.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0251.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0251.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0251.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0251.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d220, Length=0x28, ResultLength=0x0) [0251.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0251.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0251.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0251.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0251.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0251.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0251.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0251.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0251.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0251.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0251.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0251.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0251.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x50, ResultLength=0x0) [0251.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x50, ResultLength=0x0) [0251.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d560, Length=0x50, ResultLength=0x0) [0251.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x50, ResultLength=0x0) [0251.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.155] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x50, ResultLength=0x0) [0251.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x50, ResultLength=0x0) [0251.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.156] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x50, ResultLength=0x0) [0251.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.157] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0251.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.166] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0251.166] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.166] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.166] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0251.166] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.166] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0251.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d220, Length=0x28, ResultLength=0x0) [0251.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0251.168] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.168] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0251.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0251.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0251.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0251.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0251.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0251.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0251.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0251.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0251.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x50, ResultLength=0x0) [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0251.177] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x50, ResultLength=0x0) [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.177] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x50, ResultLength=0x0) [0251.178] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.178] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x50, ResultLength=0x0) [0251.178] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.179] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0251.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x28, ResultLength=0x0) [0251.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x28, ResultLength=0x0) [0251.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x28, ResultLength=0x0) [0251.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x28, ResultLength=0x0) [0251.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0251.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x28, ResultLength=0x0) [0251.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x28, ResultLength=0x0) [0251.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0251.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0251.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0251.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x50, ResultLength=0x0) [0251.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x28, ResultLength=0x0) [0251.302] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0251.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x50, ResultLength=0x0) [0251.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x50, ResultLength=0x0) [0251.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d610, Length=0x50, ResultLength=0x0) [0251.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0251.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x28, ResultLength=0x0) [0251.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x28, ResultLength=0x0) [0251.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d370, Length=0x28, ResultLength=0x0) [0251.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x28, ResultLength=0x0) [0251.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0251.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x28, ResultLength=0x0) [0251.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x28, ResultLength=0x0) [0251.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x38, ResultLength=0x0) [0251.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x20, ResultLength=0x0) [0251.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0251.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x20, ResultLength=0x0) [0251.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.460] GetProcessHeap () returned 0x298cddd0000 [0251.460] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde3f10 [0251.460] GetProcessHeap () returned 0x298cddd0000 [0251.460] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef9abf0 [0251.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.462] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.462] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.462] GetProcessHeap () returned 0x298cddd0000 [0251.462] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceff94a0 [0251.462] GetProcessHeap () returned 0x298cddd0000 [0251.462] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cf098010 [0251.462] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.462] GetProcessHeap () returned 0x298cddd0000 [0251.463] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4690 [0251.463] GetProcessHeap () returned 0x298cddd0000 [0251.463] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef8b9b0 [0251.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8c0, Length=0x50, ResultLength=0x0) [0251.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.467] GetProcessHeap () returned 0x298cddd0000 [0251.467] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4a50 [0251.467] GetProcessHeap () returned 0x298cddd0000 [0251.467] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef9ae90 [0251.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.469] GetProcessHeap () returned 0x298cddd0000 [0251.469] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x230) returned 0x298ceff9b60 [0251.469] GetProcessHeap () returned 0x298cddd0000 [0251.469] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cf098970 [0251.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.469] GetProcessHeap () returned 0x298cddd0000 [0251.469] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0xe0) returned 0x298cdde4690 [0251.469] GetProcessHeap () returned 0x298cddd0000 [0251.469] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cef00650 [0251.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8c0, Length=0x50, ResultLength=0x0) [0251.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0251.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0251.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0251.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0251.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0251.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0251.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0251.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0251.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0251.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0251.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0251.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0251.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x28, ResultLength=0x0) [0251.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0251.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0251.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0251.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x20, ResultLength=0x0) [0251.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0251.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0251.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0251.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0251.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0251.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x20, ResultLength=0x0) [0251.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0251.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0251.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0251.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0251.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0251.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0251.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0251.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0251.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0251.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0251.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0251.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0251.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0251.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0251.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0251.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0251.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0251.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0251.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0251.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0251.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0251.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0251.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0251.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0251.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0251.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0251.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0251.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0251.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0251.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0251.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0251.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.584] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.632] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0251.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0251.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0251.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0251.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0251.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0251.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0251.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0251.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0251.641] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0251.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0251.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0251.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0251.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0251.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0251.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0251.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0251.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0251.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0251.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0251.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0251.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0251.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0251.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0251.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0251.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0251.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0251.657] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0251.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0251.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0251.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0251.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0251.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0251.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0251.710] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.710] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.710] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0251.711] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.711] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.711] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0251.711] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.711] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.711] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0251.711] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.711] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0251.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.714] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0251.715] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0251.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0252.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0252.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0252.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0252.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0252.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.135] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0252.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0252.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.136] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0252.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0252.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x28, ResultLength=0x0) [0252.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0252.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.142] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0252.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x20, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0252.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0252.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x20, ResultLength=0x0) [0252.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0252.159] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0252.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.165] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.166] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.166] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.167] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0252.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.236] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.245] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.245] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.245] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.245] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.245] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0252.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.253] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.253] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.253] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.253] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.253] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.253] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.253] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.253] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0252.256] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.256] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.257] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.265] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0252.266] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.267] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0252.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.272] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.319] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0252.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0252.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0252.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0252.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0252.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0252.324] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.335] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.335] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.335] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0252.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0252.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0252.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0252.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0252.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0252.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0252.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0252.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x50, ResultLength=0x0) [0252.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0252.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0252.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0252.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x50, ResultLength=0x0) [0252.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0252.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0252.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0252.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0252.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x28, ResultLength=0x0) [0252.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x28, ResultLength=0x0) [0252.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0252.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0252.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d250, Length=0x28, ResultLength=0x0) [0252.417] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x20, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.418] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0252.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x38, ResultLength=0x0) [0252.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x20, ResultLength=0x0) [0252.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0252.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.419] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0252.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.421] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.422] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0252.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0252.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.486] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.493] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0252.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.499] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.500] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.501] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x20, ResultLength=0x0) [0252.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0252.504] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0252.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0252.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0252.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0252.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0252.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0252.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d790, Length=0x28, ResultLength=0x0) [0252.525] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d810, Length=0x50, ResultLength=0x0) [0252.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x28, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5e0, Length=0x28, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0252.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d660, Length=0x28, ResultLength=0x0) [0252.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0252.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x20, ResultLength=0x0) [0252.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d740, Length=0x38, ResultLength=0x0) [0252.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x20, ResultLength=0x0) [0252.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0252.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d550, Length=0x20, ResultLength=0x0) [0252.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0252.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0252.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0252.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0252.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0252.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0252.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0252.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0252.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0252.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0252.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0252.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0252.599] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d100, Length=0x28, ResultLength=0x0) [0252.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0252.600] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.601] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0252.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0252.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0252.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0252.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0252.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0252.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0252.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0252.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x20, ResultLength=0x0) [0252.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.610] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d440, Length=0x50, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.611] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0252.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x50, ResultLength=0x0) [0252.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0252.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0252.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0252.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0252.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x28, ResultLength=0x0) [0252.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d100, Length=0x28, ResultLength=0x0) [0252.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0252.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0252.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0252.623] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0252.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0252.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0252.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfa0, Length=0x20, ResultLength=0x0) [0252.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.624] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0252.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x38, ResultLength=0x0) [0252.625] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x20, ResultLength=0x0) [0252.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0252.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.626] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.627] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d820, Length=0x20, ResultLength=0x0) [0252.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0252.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0252.630] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.631] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0252.631] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0252.631] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.631] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0252.631] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.631] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0252.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0252.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0252.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0252.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0252.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0252.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0252.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.639] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0252.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0252.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0252.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0252.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x20, ResultLength=0x0) [0252.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0252.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0252.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0252.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0252.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x20, ResultLength=0x0) [0252.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0252.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0252.648] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.649] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a0, Length=0x50, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.650] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0252.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x50, ResultLength=0x0) [0252.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.651] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0252.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0252.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0252.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0252.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0252.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0252.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0252.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.661] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0252.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x20, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x20, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x38, ResultLength=0x0) [0252.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d240, Length=0x20, ResultLength=0x0) [0252.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0252.664] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0252.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5d0, Length=0x28, ResultLength=0x0) [0252.666] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d650, Length=0x50, ResultLength=0x0) [0252.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0252.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.674] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.674] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0252.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0252.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0252.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0252.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0252.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x38, ResultLength=0x0) [0252.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0252.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x20, ResultLength=0x0) [0252.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d780, Length=0x40, ResultLength=0x0) [0252.717] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.718] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0252.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0252.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0252.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.719] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0252.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d508, Length=0x30, ResultLength=0x0) [0252.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0252.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.720] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0252.721] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.721] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.722] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.722] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.722] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.722] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.727] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.728] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x28, ResultLength=0x0) [0252.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.729] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0252.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0252.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cfd0, Length=0x20, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf50, Length=0x20, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf50, Length=0x20, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807cf50, Length=0x20, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0252.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0252.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0252.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0252.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0252.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x40, ResultLength=0x0) [0252.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0252.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x30, ResultLength=0x0) [0252.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d508, Length=0x30, ResultLength=0x0) [0252.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0252.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0252.746] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x28, ResultLength=0x0) [0252.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0252.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0252.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0252.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0252.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0252.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0252.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0252.760] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0252.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0252.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.761] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d260, Length=0x28, ResultLength=0x0) [0252.762] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.762] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x50, ResultLength=0x0) [0252.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.763] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.767] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d040, Length=0x28, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0b0, Length=0x28, ResultLength=0x0) [0252.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0252.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.773] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d130, Length=0x28, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0252.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d010, Length=0x20, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x38, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d090, Length=0x20, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0252.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d020, Length=0x20, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.778] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x50, ResultLength=0x0) [0252.778] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.778] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x50, ResultLength=0x0) [0252.778] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.778] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d8f0, Length=0x50, ResultLength=0x0) [0252.778] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7e0, Length=0x50, ResultLength=0x0) [0252.778] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.778] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7e0, Length=0x50, ResultLength=0x0) [0252.779] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.779] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7e0, Length=0x50, ResultLength=0x0) [0252.779] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.779] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7e0, Length=0x50, ResultLength=0x0) [0252.779] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.779] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x38, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x28, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x28, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x28, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x28, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x28, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x38, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x28, ResultLength=0x0) [0252.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d630, Length=0x28, ResultLength=0x0) [0252.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x20, ResultLength=0x0) [0252.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0252.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0252.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d450, Length=0x20, ResultLength=0x0) [0252.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.804] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x38, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d710, Length=0x38, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d590, Length=0x20, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d520, Length=0x20, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d520, Length=0x20, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d888, Length=0x50, ResultLength=0x0) [0252.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d800, Length=0x28, ResultLength=0x0) [0252.806] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d888, Length=0x50, ResultLength=0x0) [0252.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d888, Length=0x50, ResultLength=0x0) [0252.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x50, ResultLength=0x0) [0252.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6f0, Length=0x28, ResultLength=0x0) [0252.807] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0252.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x50, ResultLength=0x0) [0252.808] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.808] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x50, ResultLength=0x0) [0252.808] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.808] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d770, Length=0x50, ResultLength=0x0) [0252.809] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.809] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6a0, Length=0x38, ResultLength=0x0) [0252.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x28, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x28, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4d0, Length=0x28, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d540, Length=0x28, ResultLength=0x0) [0252.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6a0, Length=0x38, ResultLength=0x0) [0252.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x28, ResultLength=0x0) [0252.818] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.819] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.819] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.819] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.819] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5c0, Length=0x28, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6a0, Length=0x38, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d520, Length=0x20, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x20, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.820] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x20, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x20, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6a0, Length=0x38, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d520, Length=0x20, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x20, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.821] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x20, ResultLength=0x0) [0252.822] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.822] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.822] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.822] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.822] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.822] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.823] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb82807d7d0 | out: lpSystemTimeAsFileTime=0xb82807d7d0*(dwLowDateTime=0xd551d5ca, dwHighDateTime=0x1d61c67)) [0252.823] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.823] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d888, Length=0x50, ResultLength=0x0) [0252.823] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7c0, Length=0x28, ResultLength=0x0) [0252.823] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d8, Length=0x50, ResultLength=0x0) [0252.823] GetTickCount () returned 0x117f82e [0252.823] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a8, Length=0x58, ResultLength=0x0) [0252.823] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.823] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0252.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0252.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0252.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.827] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0252.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2f0, Length=0x28, ResultLength=0x0) [0252.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.828] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d360, Length=0x28, ResultLength=0x0) [0252.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0252.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.829] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x28, ResultLength=0x0) [0252.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.834] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x28, ResultLength=0x0) [0252.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0252.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0252.835] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0252.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0252.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0252.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.836] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x38, ResultLength=0x0) [0252.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x20, ResultLength=0x0) [0252.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x20, ResultLength=0x0) [0252.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x20, ResultLength=0x0) [0252.837] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.838] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a8, Length=0x58, ResultLength=0x0) [0252.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.839] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0252.842] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.843] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.846] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x28, ResultLength=0x0) [0252.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.847] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x28, ResultLength=0x0) [0252.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x28, ResultLength=0x0) [0252.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x28, ResultLength=0x0) [0252.848] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x28, ResultLength=0x0) [0252.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.849] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0252.850] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0252.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.853] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0252.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0252.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0252.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.860] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d220, Length=0x20, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.861] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3f0, Length=0x20, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x20, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0252.862] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x20, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0252.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0252.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x20, ResultLength=0x0) [0252.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0252.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0252.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5a8, Length=0x58, ResultLength=0x0) [0252.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x58, ResultLength=0x0) [0252.867] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.867] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0252.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0252.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0252.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.871] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d230, Length=0x28, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.872] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0252.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0252.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.877] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0252.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0252.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x20, ResultLength=0x0) [0252.878] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0252.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x20, ResultLength=0x0) [0252.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0252.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0252.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x58, ResultLength=0x0) [0252.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0252.885] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.885] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0252.885] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0252.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0252.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0252.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d230, Length=0x28, ResultLength=0x0) [0252.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0252.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0252.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0d0, Length=0x20, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0252.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0252.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x20, ResultLength=0x0) [0252.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0252.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0252.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0252.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x58, ResultLength=0x0) [0253.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0253.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0253.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0253.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.012] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0253.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.013] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1c0, Length=0x28, ResultLength=0x0) [0253.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d230, Length=0x28, ResultLength=0x0) [0253.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.015] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.015] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0253.015] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.015] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0253.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x20, ResultLength=0x0) [0253.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.062] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.063] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d390, Length=0x38, ResultLength=0x0) [0253.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x20, ResultLength=0x0) [0253.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0253.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.064] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1a0, Length=0x20, ResultLength=0x0) [0253.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.065] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x58, ResultLength=0x0) [0253.066] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.066] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0253.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.069] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.073] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0253.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0253.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0253.074] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x28, ResultLength=0x0) [0253.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x28, ResultLength=0x0) [0253.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.075] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0253.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0253.076] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.077] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x28, ResultLength=0x0) [0253.080] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.081] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.081] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.081] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.082] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.082] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x28, ResultLength=0x0) [0253.082] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.082] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.082] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0253.082] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.082] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0253.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.083] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0f0, Length=0x20, ResultLength=0x0) [0253.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0253.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.084] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d070, Length=0x20, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.089] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x20, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.090] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x20, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x38, ResultLength=0x0) [0253.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1e0, Length=0x20, ResultLength=0x0) [0253.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0253.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d170, Length=0x20, ResultLength=0x0) [0253.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6d8, Length=0x50, ResultLength=0x0) [0253.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x38, ResultLength=0x0) [0253.097] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d430, Length=0x28, ResultLength=0x0) [0253.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d430, Length=0x28, ResultLength=0x0) [0253.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d430, Length=0x28, ResultLength=0x0) [0253.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d430, Length=0x28, ResultLength=0x0) [0253.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x28, ResultLength=0x0) [0253.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x38, ResultLength=0x0) [0253.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.101] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d520, Length=0x28, ResultLength=0x0) [0253.105] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.105] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.105] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.105] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d520, Length=0x28, ResultLength=0x0) [0253.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x38, ResultLength=0x0) [0253.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0253.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0253.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.106] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d600, Length=0x38, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x20, ResultLength=0x0) [0253.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0253.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d410, Length=0x20, ResultLength=0x0) [0253.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.108] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.109] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d580, Length=0x50, ResultLength=0x0) [0253.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.110] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0253.114] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.114] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0253.114] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.114] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.114] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0253.114] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.114] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0253.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0253.115] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.116] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x28, ResultLength=0x0) [0253.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0253.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.117] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x28, ResultLength=0x0) [0253.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.122] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x28, ResultLength=0x0) [0253.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.123] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x20, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0253.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x20, ResultLength=0x0) [0253.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0253.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.125] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0253.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.126] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d568, Length=0x50, ResultLength=0x0) [0253.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x38, ResultLength=0x0) [0253.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x28, ResultLength=0x0) [0253.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x28, ResultLength=0x0) [0253.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x28, ResultLength=0x0) [0253.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x28, ResultLength=0x0) [0253.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.163] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x38, ResultLength=0x0) [0253.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.164] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0253.168] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3b0, Length=0x28, ResultLength=0x0) [0253.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x38, ResultLength=0x0) [0253.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x20, ResultLength=0x0) [0253.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0253.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0253.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0253.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x38, ResultLength=0x0) [0253.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d310, Length=0x20, ResultLength=0x0) [0253.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0253.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d878, Length=0x50, ResultLength=0x0) [0253.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7f0, Length=0x28, ResultLength=0x0) [0253.174] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.174] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d878, Length=0x50, ResultLength=0x0) [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d878, Length=0x50, ResultLength=0x0) [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6e0, Length=0x28, ResultLength=0x0) [0253.175] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0253.175] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0253.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d760, Length=0x50, ResultLength=0x0) [0253.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x38, ResultLength=0x0) [0253.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x28, ResultLength=0x0) [0253.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x28, ResultLength=0x0) [0253.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4c0, Length=0x28, ResultLength=0x0) [0253.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d530, Length=0x28, ResultLength=0x0) [0253.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x38, ResultLength=0x0) [0253.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x28, ResultLength=0x0) [0253.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5b0, Length=0x28, ResultLength=0x0) [0253.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x38, ResultLength=0x0) [0253.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x20, ResultLength=0x0) [0253.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x20, ResultLength=0x0) [0253.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x20, ResultLength=0x0) [0253.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x20, ResultLength=0x0) [0253.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d690, Length=0x38, ResultLength=0x0) [0253.196] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x20, ResultLength=0x0) [0253.196] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x20, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x20, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.198] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb82807d7c0 | out: lpSystemTimeAsFileTime=0xb82807d7c0*(dwLowDateTime=0xd58b0e24, dwHighDateTime=0x1d61c67)) [0253.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d878, Length=0x50, ResultLength=0x0) [0253.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d7b0, Length=0x28, ResultLength=0x0) [0253.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c8, Length=0x50, ResultLength=0x0) [0253.198] GetTickCount () returned 0x117f9a5 [0253.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d598, Length=0x58, ResultLength=0x0) [0253.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0253.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0253.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0253.202] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0253.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2e0, Length=0x28, ResultLength=0x0) [0253.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d350, Length=0x28, ResultLength=0x0) [0253.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0253.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x28, ResultLength=0x0) [0253.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3d0, Length=0x28, ResultLength=0x0) [0253.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.210] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x20, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.211] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4b0, Length=0x38, ResultLength=0x0) [0253.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d330, Length=0x20, ResultLength=0x0) [0253.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0253.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.212] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2c0, Length=0x20, ResultLength=0x0) [0253.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.213] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.214] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d598, Length=0x58, ResultLength=0x0) [0253.214] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.214] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0253.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x28, ResultLength=0x0) [0253.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0253.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0253.224] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.224] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3a0, Length=0x28, ResultLength=0x0) [0253.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3a0, Length=0x28, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0253.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.229] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d210, Length=0x20, ResultLength=0x0) [0253.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.230] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3e0, Length=0x20, ResultLength=0x0) [0253.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0253.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x20, ResultLength=0x0) [0253.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x20, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x38, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x20, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0253.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d598, Length=0x58, ResultLength=0x0) [0253.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x58, ResultLength=0x0) [0253.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.239] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.239] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.239] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.239] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.239] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.239] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.239] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.239] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d220, Length=0x28, ResultLength=0x0) [0253.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.270] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.271] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0253.275] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.275] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.275] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0253.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.276] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0253.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0253.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0253.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0253.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.277] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.278] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x58, ResultLength=0x0) [0253.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.279] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d220, Length=0x28, ResultLength=0x0) [0253.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0253.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d140, Length=0x20, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0c0, Length=0x20, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0253.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x58, ResultLength=0x0) [0253.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1b0, Length=0x28, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.294] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d220, Length=0x28, ResultLength=0x0) [0253.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.295] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0253.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x28, ResultLength=0x0) [0253.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0253.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0253.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0253.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x20, ResultLength=0x0) [0253.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d380, Length=0x38, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d200, Length=0x20, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d190, Length=0x20, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d460, Length=0x58, ResultLength=0x0) [0253.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0253.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0253.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0253.320] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d180, Length=0x28, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1f0, Length=0x28, ResultLength=0x0) [0253.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0253.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0253.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0253.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d270, Length=0x28, ResultLength=0x0) [0253.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0253.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0253.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d0e0, Length=0x20, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d060, Length=0x20, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d150, Length=0x20, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x38, ResultLength=0x0) [0253.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d1d0, Length=0x20, ResultLength=0x0) [0253.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0253.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d160, Length=0x20, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d6c8, Length=0x50, ResultLength=0x0) [0253.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x38, ResultLength=0x0) [0253.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0253.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0253.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d420, Length=0x28, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d490, Length=0x28, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x38, ResultLength=0x0) [0253.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0253.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d510, Length=0x28, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x38, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3f0, Length=0x20, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3f0, Length=0x20, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3f0, Length=0x20, ResultLength=0x0) [0253.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d5f0, Length=0x38, ResultLength=0x0) [0253.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d470, Length=0x20, ResultLength=0x0) [0253.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0253.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d400, Length=0x20, ResultLength=0x0) [0253.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d570, Length=0x50, ResultLength=0x0) [0253.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x38, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x28, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x28, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x28, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.391] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2d0, Length=0x28, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d340, Length=0x28, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x38, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.392] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x28, ResultLength=0x0) [0253.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.396] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3c0, Length=0x28, ResultLength=0x0) [0253.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.397] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x38, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x20, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2a0, Length=0x20, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.398] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d4a0, Length=0x38, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x20, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x20, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.399] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.400] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.400] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d558, Length=0x50, ResultLength=0x0) [0253.400] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.400] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0253.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.403] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.404] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d2b0, Length=0x28, ResultLength=0x0) [0253.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d320, Length=0x28, ResultLength=0x0) [0253.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0253.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3a0, Length=0x28, ResultLength=0x0) [0253.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d3a0, Length=0x28, ResultLength=0x0) [0253.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x20, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d280, Length=0x20, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d480, Length=0x38, ResultLength=0x0) [0253.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d300, Length=0x20, ResultLength=0x0) [0253.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0253.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807d290, Length=0x20, ResultLength=0x0) [0253.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.423] GetProcessHeap () returned 0x298cddd0000 [0253.423] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cf098430 [0253.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.481] GetProcessHeap () returned 0x298cddd0000 [0253.481] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x28) returned 0x298cf098e50 [0253.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e440, Length=0x28, ResultLength=0x0) [0253.483] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x28, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.494] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.495] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.496] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e440, Length=0x28, ResultLength=0x0) [0253.497] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.497] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.502] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.503] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x28, ResultLength=0x0) [0253.504] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.505] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.508] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.509] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.510] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e440, Length=0x28, ResultLength=0x0) [0253.512] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x28, ResultLength=0x0) [0253.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e440, Length=0x28, ResultLength=0x0) [0253.527] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.535] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x28, ResultLength=0x0) [0253.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.536] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.537] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.544] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e440, Length=0x28, ResultLength=0x0) [0253.548] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x28, ResultLength=0x0) [0253.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e440, Length=0x28, ResultLength=0x0) [0253.563] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x28, ResultLength=0x0) [0253.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e440, Length=0x28, ResultLength=0x0) [0253.578] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x28, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.603] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.604] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.605] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.606] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e440, Length=0x28, ResultLength=0x0) [0253.607] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.607] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4c0, Length=0x50, ResultLength=0x0) [0253.608] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.609] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.612] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e220, Length=0x28, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e290, Length=0x28, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.613] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.614] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.617] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x28, ResultLength=0x0) [0253.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.618] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e1f0, Length=0x20, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.619] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3f0, Length=0x38, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e270, Length=0x20, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e200, Length=0x20, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.620] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.621] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0253.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea80, Length=0x28, ResultLength=0x0) [0253.628] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0253.628] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0253.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0253.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.629] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0253.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.636] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.637] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x28, ResultLength=0x0) [0253.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0253.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.638] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0253.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0253.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0253.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0253.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0253.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0253.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea80, Length=0x28, ResultLength=0x0) [0253.644] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0253.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0253.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.645] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0253.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0253.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0253.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.654] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0253.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x28, ResultLength=0x0) [0253.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0253.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0253.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0253.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0253.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.660] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.662] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.663] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.716] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x50, ResultLength=0x0) [0254.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x50, ResultLength=0x0) [0254.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.733] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x50, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x50, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x50, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x50, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x50, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.734] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x38, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x28, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x28, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x28, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x28, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e810, Length=0x28, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x38, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e890, Length=0x28, ResultLength=0x0) [0254.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e890, Length=0x28, ResultLength=0x0) [0254.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x20, ResultLength=0x0) [0254.741] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x20, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x20, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x20, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x38, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x38, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x20, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e780, Length=0x20, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e780, Length=0x20, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.744] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eba0, Length=0x50, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eba0, Length=0x50, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eba0, Length=0x50, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.745] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eba0, Length=0x50, ResultLength=0x0) [0254.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0254.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.750] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x28, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x28, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x28, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x28, ResultLength=0x0) [0254.751] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0254.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.752] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x28, ResultLength=0x0) [0254.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.754] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x28, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0254.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x20, ResultLength=0x0) [0254.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x20, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.757] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eba0, Length=0x50, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eba0, Length=0x50, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eba0, Length=0x50, ResultLength=0x0) [0254.758] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eba0, Length=0x50, ResultLength=0x0) [0254.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.759] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0254.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x28, ResultLength=0x0) [0254.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x28, ResultLength=0x0) [0254.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.764] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x28, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x28, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.765] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x28, ResultLength=0x0) [0254.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x28, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0254.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x20, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x20, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x50, ResultLength=0x0) [0254.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ece0, Length=0x28, ResultLength=0x0) [0254.777] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x50, ResultLength=0x0) [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x50, ResultLength=0x0) [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x50, ResultLength=0x0) [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.777] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb30, Length=0x28, ResultLength=0x0) [0254.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x28, ResultLength=0x0) [0254.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x28, ResultLength=0x0) [0254.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x20, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.787] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x20, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaa0, Length=0x20, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaa0, Length=0x20, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.788] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x50, ResultLength=0x0) [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ece0, Length=0x28, ResultLength=0x0) [0254.789] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x50, ResultLength=0x0) [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x50, ResultLength=0x0) [0254.790] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.790] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x50, ResultLength=0x0) [0254.790] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.790] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb30, Length=0x28, ResultLength=0x0) [0254.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x28, ResultLength=0x0) [0254.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x28, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x20, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.799] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x20, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaa0, Length=0x20, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.800] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaa0, Length=0x20, ResultLength=0x0) [0254.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.801] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.802] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807efc0, Length=0x50, ResultLength=0x0) [0254.802] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.802] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807efc0, Length=0x50, ResultLength=0x0) [0254.802] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.802] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807efc0, Length=0x50, ResultLength=0x0) [0254.802] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef10, Length=0x38, ResultLength=0x0) [0254.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ee50, Length=0x28, ResultLength=0x0) [0254.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed68, Length=0x50, ResultLength=0x0) [0254.803] GetTickCount () returned 0x117ffee [0254.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec38, Length=0x58, ResultLength=0x0) [0254.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x38, ResultLength=0x0) [0254.805] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x28, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x28, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x28, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x28, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.806] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x28, ResultLength=0x0) [0254.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x38, ResultLength=0x0) [0254.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.807] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x28, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x28, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.810] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x38, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x20, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x38, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x20, ResultLength=0x0) [0254.811] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e960, Length=0x20, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e960, Length=0x20, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.812] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec38, Length=0x58, ResultLength=0x0) [0254.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.813] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x38, ResultLength=0x0) [0254.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.815] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0254.890] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0254.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9c0, Length=0x28, ResultLength=0x0) [0254.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x38, ResultLength=0x0) [0254.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x38, ResultLength=0x0) [0254.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x28, ResultLength=0x0) [0254.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.895] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x28, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x38, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x38, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.896] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea80, Length=0x20, ResultLength=0x0) [0254.897] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x38, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x20, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.898] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x38, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x20, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x38, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x20, ResultLength=0x0) [0254.899] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x20, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x20, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec38, Length=0x58, ResultLength=0x0) [0254.900] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x58, ResultLength=0x0) [0254.901] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.901] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x28, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.904] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.905] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.907] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.908] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x58, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.909] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.911] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.911] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.911] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.911] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.911] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.911] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x28, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.912] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.913] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.913] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.913] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0254.915] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7e0, Length=0x20, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e760, Length=0x20, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e760, Length=0x20, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.916] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e760, Length=0x20, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.917] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x58, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.918] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.921] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.921] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.921] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.921] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.921] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.921] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.921] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.921] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x28, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.922] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.923] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0254.925] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0254.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.926] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0254.927] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.928] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x58, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.931] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x38, ResultLength=0x0) [0254.933] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.934] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.936] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x28, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x28, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x28, ResultLength=0x0) [0254.937] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x28, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e890, Length=0x28, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x38, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.938] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x38, ResultLength=0x0) [0254.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.939] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x28, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x28, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.942] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x38, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x38, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e780, Length=0x20, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0254.943] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x38, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x20, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x20, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x20, ResultLength=0x0) [0254.944] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x38, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x20, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x20, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x20, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.945] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x38, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e800, Length=0x20, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e800, Length=0x20, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.946] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed68, Length=0x50, ResultLength=0x0) [0254.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.947] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.949] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x28, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb30, Length=0x28, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.950] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.951] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x28, ResultLength=0x0) [0254.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.953] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x28, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x20, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.954] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x20, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec90, Length=0x38, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x20, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaa0, Length=0x20, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.955] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaa0, Length=0x20, ResultLength=0x0) [0254.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.956] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec10, Length=0x50, ResultLength=0x0) [0254.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.957] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb40, Length=0x38, ResultLength=0x0) [0255.085] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x28, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x28, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x28, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.086] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.087] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e970, Length=0x28, ResultLength=0x0) [0255.087] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.087] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.087] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.087] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.087] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.088] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb40, Length=0x38, ResultLength=0x0) [0255.088] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.088] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x28, ResultLength=0x0) [0255.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.091] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x28, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb40, Length=0x38, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9c0, Length=0x20, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x20, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.092] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x20, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x20, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb40, Length=0x38, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9c0, Length=0x20, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0255.093] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x20, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.094] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.095] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf8, Length=0x50, ResultLength=0x0) [0255.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.095] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb20, Length=0x38, ResultLength=0x0) [0255.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0255.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.098] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0255.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0255.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.099] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9c0, Length=0x28, ResultLength=0x0) [0255.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.100] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb20, Length=0x38, ResultLength=0x0) [0255.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.124] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x28, ResultLength=0x0) [0255.126] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x28, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb20, Length=0x38, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x20, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.128] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb20, Length=0x38, ResultLength=0x0) [0255.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x20, ResultLength=0x0) [0255.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x20, ResultLength=0x0) [0255.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.129] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x20, ResultLength=0x0) [0255.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.130] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.131] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb82807ed90 | out: lpSystemTimeAsFileTime=0xb82807ed90*(dwLowDateTime=0xd6b04d74, dwHighDateTime=0x1d61c67)) [0255.131] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.132] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807edb0, Length=0x50, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807edb0, Length=0x50, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807edb0, Length=0x50, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eca0, Length=0x50, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eca0, Length=0x50, ResultLength=0x0) [0255.133] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eca0, Length=0x50, ResultLength=0x0) [0255.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eca0, Length=0x50, ResultLength=0x0) [0255.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.134] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x38, ResultLength=0x0) [0255.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea00, Length=0x28, ResultLength=0x0) [0255.139] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea00, Length=0x28, ResultLength=0x0) [0255.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea00, Length=0x28, ResultLength=0x0) [0255.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.140] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x28, ResultLength=0x0) [0255.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x38, ResultLength=0x0) [0255.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.141] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x28, ResultLength=0x0) [0255.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x28, ResultLength=0x0) [0255.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x38, ResultLength=0x0) [0255.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea50, Length=0x20, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x20, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x20, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x20, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x38, ResultLength=0x0) [0255.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea50, Length=0x20, ResultLength=0x0) [0255.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x20, ResultLength=0x0) [0255.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x20, ResultLength=0x0) [0255.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eee0, Length=0x50, ResultLength=0x0) [0255.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eee0, Length=0x50, ResultLength=0x0) [0255.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eee0, Length=0x50, ResultLength=0x0) [0255.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed70, Length=0x28, ResultLength=0x0) [0255.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec88, Length=0x50, ResultLength=0x0) [0255.149] GetTickCount () returned 0x1180146 [0255.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb58, Length=0x58, ResultLength=0x0) [0255.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x38, ResultLength=0x0) [0255.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x28, ResultLength=0x0) [0255.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x28, ResultLength=0x0) [0255.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.160] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x28, ResultLength=0x0) [0255.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x28, ResultLength=0x0) [0255.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.161] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x28, ResultLength=0x0) [0255.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x38, ResultLength=0x0) [0255.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.162] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e990, Length=0x28, ResultLength=0x0) [0255.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.169] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e990, Length=0x28, ResultLength=0x0) [0255.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x38, ResultLength=0x0) [0255.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8f0, Length=0x20, ResultLength=0x0) [0255.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0255.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.170] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x38, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8f0, Length=0x20, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e880, Length=0x20, ResultLength=0x0) [0255.171] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e880, Length=0x20, ResultLength=0x0) [0255.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.172] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb58, Length=0x58, ResultLength=0x0) [0255.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.173] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0255.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.176] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.180] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x28, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x28, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x28, ResultLength=0x0) [0255.181] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x28, ResultLength=0x0) [0255.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x28, ResultLength=0x0) [0255.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.182] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0255.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0255.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.183] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e960, Length=0x28, ResultLength=0x0) [0255.186] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.186] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.186] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e960, Length=0x28, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0255.187] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.188] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.188] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.188] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.188] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7d0, Length=0x20, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x20, ResultLength=0x0) [0255.189] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.190] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.191] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0255.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x20, ResultLength=0x0) [0255.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.192] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x20, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb58, Length=0x58, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x58, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.193] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.197] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.198] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7e0, Length=0x28, ResultLength=0x0) [0255.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.199] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.200] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0255.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.203] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0255.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.204] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7c0, Length=0x20, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x20, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x20, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x20, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7c0, Length=0x20, ResultLength=0x0) [0255.205] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.206] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x58, ResultLength=0x0) [0255.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.207] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.209] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.216] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7e0, Length=0x28, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.217] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0255.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0255.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0255.221] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e680, Length=0x20, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e680, Length=0x20, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e680, Length=0x20, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.222] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7c0, Length=0x20, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.223] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.224] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.224] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.224] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x58, ResultLength=0x0) [0255.224] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.224] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.227] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7e0, Length=0x28, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.228] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0255.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.231] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0255.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.232] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7c0, Length=0x20, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x20, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x20, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x20, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x38, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7c0, Length=0x20, ResultLength=0x0) [0255.233] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.234] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x58, ResultLength=0x0) [0255.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.235] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.237] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.237] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.240] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x28, ResultLength=0x0) [0255.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.241] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x28, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x28, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e740, Length=0x28, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.242] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7b0, Length=0x28, ResultLength=0x0) [0255.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.243] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x28, ResultLength=0x0) [0255.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.246] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x28, ResultLength=0x0) [0255.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.247] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6a0, Length=0x20, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e620, Length=0x20, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e620, Length=0x20, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e620, Length=0x20, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.248] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e790, Length=0x20, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.249] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e790, Length=0x20, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.250] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e790, Length=0x20, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e720, Length=0x20, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e720, Length=0x20, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.251] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec88, Length=0x50, ResultLength=0x0) [0255.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.252] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x38, ResultLength=0x0) [0255.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.254] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea50, Length=0x28, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x38, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.255] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x28, ResultLength=0x0) [0255.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.282] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x28, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x38, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x20, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9b0, Length=0x20, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9b0, Length=0x20, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9b0, Length=0x20, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebb0, Length=0x38, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x20, ResultLength=0x0) [0255.283] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9c0, Length=0x20, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9c0, Length=0x20, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.284] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb30, Length=0x50, ResultLength=0x0) [0255.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x38, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e890, Length=0x28, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e890, Length=0x28, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e890, Length=0x28, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e890, Length=0x28, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.287] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x28, ResultLength=0x0) [0255.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x38, ResultLength=0x0) [0255.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x28, ResultLength=0x0) [0255.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x28, ResultLength=0x0) [0255.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x38, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x20, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x20, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x20, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x20, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x38, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x20, ResultLength=0x0) [0255.291] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x20, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.292] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.292] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb18, Length=0x50, ResultLength=0x0) [0255.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x38, ResultLength=0x0) [0255.296] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.296] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x28, ResultLength=0x0) [0255.296] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.296] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x28, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x28, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8e0, Length=0x28, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x38, ResultLength=0x0) [0255.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.298] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e960, Length=0x28, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e960, Length=0x28, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x38, ResultLength=0x0) [0255.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea40, Length=0x38, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x20, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x20, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xb82807ecb0 | out: lpSystemTimeAsFileTime=0xb82807ecb0*(dwLowDateTime=0xd6ca887f, dwHighDateTime=0x1d61c67)) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x50, ResultLength=0x0) [0255.303] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x50, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x50, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x50, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x50, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x50, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x50, ResultLength=0x0) [0255.304] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.305] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x38, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5d0, Length=0x28, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5d0, Length=0x28, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5d0, Length=0x28, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5d0, Length=0x28, ResultLength=0x0) [0255.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x28, ResultLength=0x0) [0255.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x38, ResultLength=0x0) [0255.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6c0, Length=0x28, ResultLength=0x0) [0255.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6c0, Length=0x28, ResultLength=0x0) [0255.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e560, Length=0x20, ResultLength=0x0) [0255.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4e0, Length=0x20, ResultLength=0x0) [0255.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4e0, Length=0x20, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4e0, Length=0x20, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x38, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x38, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e620, Length=0x20, ResultLength=0x0) [0255.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5b0, Length=0x20, ResultLength=0x0) [0255.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5b0, Length=0x20, ResultLength=0x0) [0255.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eae0, Length=0x50, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eae0, Length=0x50, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eae0, Length=0x50, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x50, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x50, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x50, ResultLength=0x0) [0255.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x50, ResultLength=0x0) [0255.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0255.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0255.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0255.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x28, ResultLength=0x0) [0255.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x28, ResultLength=0x0) [0255.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x28, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e780, Length=0x20, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e780, Length=0x20, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eae0, Length=0x50, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eae0, Length=0x50, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eae0, Length=0x50, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x50, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x50, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x50, ResultLength=0x0) [0255.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9d0, Length=0x50, ResultLength=0x0) [0255.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x28, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x28, ResultLength=0x0) [0255.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x28, ResultLength=0x0) [0255.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x28, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e780, Length=0x20, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x38, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e780, Length=0x20, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x20, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb90, Length=0x50, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x28, ResultLength=0x0) [0255.344] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb90, Length=0x50, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb90, Length=0x50, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb90, Length=0x50, ResultLength=0x0) [0255.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x38, ResultLength=0x0) [0255.349] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8f0, Length=0x28, ResultLength=0x0) [0255.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8f0, Length=0x28, ResultLength=0x0) [0255.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8f0, Length=0x28, ResultLength=0x0) [0255.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e960, Length=0x28, ResultLength=0x0) [0255.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x38, ResultLength=0x0) [0255.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x38, ResultLength=0x0) [0255.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x20, ResultLength=0x0) [0255.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x38, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x20, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb90, Length=0x50, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x28, ResultLength=0x0) [0255.359] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb90, Length=0x50, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb90, Length=0x50, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb90, Length=0x50, ResultLength=0x0) [0255.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x38, ResultLength=0x0) [0255.365] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.365] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8f0, Length=0x28, ResultLength=0x0) [0255.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8f0, Length=0x28, ResultLength=0x0) [0255.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.405] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8f0, Length=0x28, ResultLength=0x0) [0255.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e960, Length=0x28, ResultLength=0x0) [0255.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x38, ResultLength=0x0) [0255.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.406] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.409] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.410] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9e0, Length=0x28, ResultLength=0x0) [0255.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x38, ResultLength=0x0) [0255.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x20, ResultLength=0x0) [0255.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.411] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x20, ResultLength=0x0) [0255.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.412] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eac0, Length=0x38, ResultLength=0x0) [0255.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x20, ResultLength=0x0) [0255.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0255.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x20, ResultLength=0x0) [0255.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.413] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.414] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.420] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ede0, Length=0x40, ResultLength=0x0) [0255.423] LocalFree (hMem=0x298cee51ed0) [0255.423] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.424] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ede0, Length=0x40, ResultLength=0x0) [0255.424] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.424] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.425] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x40, ResultLength=0x0) [0255.425] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.425] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x40, ResultLength=0x0) [0255.425] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec60, Length=0x30, ResultLength=0x0) [0255.425] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.425] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec60, Length=0x30, ResultLength=0x0) [0255.425] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb68, Length=0x30, ResultLength=0x0) [0255.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ead0, Length=0x38, ResultLength=0x0) [0255.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x50, ResultLength=0x0) [0255.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x28, ResultLength=0x0) [0255.426] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.426] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x50, ResultLength=0x0) [0255.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x50, ResultLength=0x0) [0255.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x50, ResultLength=0x0) [0255.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.427] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x38, ResultLength=0x0) [0255.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6a0, Length=0x28, ResultLength=0x0) [0255.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6a0, Length=0x28, ResultLength=0x0) [0255.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.432] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6a0, Length=0x28, ResultLength=0x0) [0255.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x28, ResultLength=0x0) [0255.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x38, ResultLength=0x0) [0255.433] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.434] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e790, Length=0x28, ResultLength=0x0) [0255.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.437] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.438] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e790, Length=0x28, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x38, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x20, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e670, Length=0x20, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e670, Length=0x20, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e670, Length=0x20, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x38, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x20, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e680, Length=0x20, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e680, Length=0x20, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x50, ResultLength=0x0) [0255.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x28, ResultLength=0x0) [0255.442] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x50, ResultLength=0x0) [0255.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x50, ResultLength=0x0) [0255.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x50, ResultLength=0x0) [0255.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x38, ResultLength=0x0) [0255.448] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6a0, Length=0x28, ResultLength=0x0) [0255.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6a0, Length=0x28, ResultLength=0x0) [0255.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6a0, Length=0x28, ResultLength=0x0) [0255.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e710, Length=0x28, ResultLength=0x0) [0255.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x38, ResultLength=0x0) [0255.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e790, Length=0x28, ResultLength=0x0) [0255.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e790, Length=0x28, ResultLength=0x0) [0255.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x38, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x20, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e670, Length=0x20, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e670, Length=0x20, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e670, Length=0x20, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e870, Length=0x38, ResultLength=0x0) [0255.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x20, ResultLength=0x0) [0255.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e680, Length=0x20, ResultLength=0x0) [0255.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e680, Length=0x20, ResultLength=0x0) [0255.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ee80, Length=0x20, ResultLength=0x0) [0255.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.462] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec00, Length=0x50, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec00, Length=0x50, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec00, Length=0x50, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x50, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x50, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x50, ResultLength=0x0) [0255.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x50, ResultLength=0x0) [0255.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0255.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0255.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0255.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0255.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x28, ResultLength=0x0) [0255.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0255.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0255.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0255.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0255.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0255.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.476] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec00, Length=0x50, ResultLength=0x0) [0255.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec00, Length=0x50, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec00, Length=0x50, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x50, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x50, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x50, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eaf0, Length=0x50, ResultLength=0x0) [0255.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0255.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0255.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0255.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.483] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e850, Length=0x28, ResultLength=0x0) [0255.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8c0, Length=0x28, ResultLength=0x0) [0255.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0255.484] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.485] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0255.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.487] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e940, Length=0x28, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.488] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e820, Length=0x20, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x38, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8a0, Length=0x20, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.489] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0255.490] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec30, Length=0x28, ResultLength=0x0) [0255.490] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0255.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0255.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecb0, Length=0x50, ResultLength=0x0) [0255.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebe0, Length=0x38, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea10, Length=0x28, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea10, Length=0x28, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea10, Length=0x28, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea80, Length=0x28, ResultLength=0x0) [0255.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebe0, Length=0x38, ResultLength=0x0) [0255.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x28, ResultLength=0x0) [0255.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x28, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x20, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e920, Length=0x20, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.524] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebe0, Length=0x38, ResultLength=0x0) [0255.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebe0, Length=0x38, ResultLength=0x0) [0255.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x20, ResultLength=0x0) [0255.525] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x20, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x20, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x50, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x50, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea60, Length=0x50, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x50, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x50, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x50, ResultLength=0x0) [0255.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x50, ResultLength=0x0) [0255.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e880, Length=0x38, ResultLength=0x0) [0255.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x28, ResultLength=0x0) [0255.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.532] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x28, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x28, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6b0, Length=0x28, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.533] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e720, Length=0x28, ResultLength=0x0) [0255.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e880, Length=0x38, ResultLength=0x0) [0255.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.534] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x28, ResultLength=0x0) [0255.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x28, ResultLength=0x0) [0255.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e640, Length=0x20, ResultLength=0x0) [0255.539] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5c0, Length=0x20, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5c0, Length=0x20, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5c0, Length=0x20, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.540] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e880, Length=0x38, ResultLength=0x0) [0255.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e880, Length=0x38, ResultLength=0x0) [0255.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x20, ResultLength=0x0) [0255.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e690, Length=0x20, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e690, Length=0x20, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.545] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.546] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x50, ResultLength=0x0) [0255.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x50, ResultLength=0x0) [0255.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x50, ResultLength=0x0) [0255.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5e0, Length=0x50, ResultLength=0x0) [0255.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5e0, Length=0x50, ResultLength=0x0) [0255.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5e0, Length=0x50, ResultLength=0x0) [0255.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5e0, Length=0x50, ResultLength=0x0) [0255.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.549] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e510, Length=0x38, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e340, Length=0x28, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e340, Length=0x28, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e340, Length=0x28, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3b0, Length=0x28, ResultLength=0x0) [0255.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e510, Length=0x38, ResultLength=0x0) [0255.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e430, Length=0x28, ResultLength=0x0) [0255.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e430, Length=0x28, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e510, Length=0x38, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e390, Length=0x20, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x20, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x20, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x20, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e510, Length=0x38, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e390, Length=0x20, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e320, Length=0x20, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e320, Length=0x20, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x50, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x50, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6f0, Length=0x50, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5e0, Length=0x50, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5e0, Length=0x50, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5e0, Length=0x50, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5e0, Length=0x50, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e510, Length=0x38, ResultLength=0x0) [0255.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e340, Length=0x28, ResultLength=0x0) [0255.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e340, Length=0x28, ResultLength=0x0) [0255.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e340, Length=0x28, ResultLength=0x0) [0255.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e3b0, Length=0x28, ResultLength=0x0) [0255.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e510, Length=0x38, ResultLength=0x0) [0255.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e430, Length=0x28, ResultLength=0x0) [0255.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e430, Length=0x28, ResultLength=0x0) [0255.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e510, Length=0x38, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e390, Length=0x20, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x20, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x20, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e310, Length=0x20, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e510, Length=0x38, ResultLength=0x0) [0255.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e390, Length=0x20, ResultLength=0x0) [0255.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e320, Length=0x20, ResultLength=0x0) [0255.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e320, Length=0x20, ResultLength=0x0) [0255.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x50, ResultLength=0x0) [0255.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e720, Length=0x28, ResultLength=0x0) [0255.582] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x50, ResultLength=0x0) [0255.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x50, ResultLength=0x0) [0255.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x50, ResultLength=0x0) [0255.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6d0, Length=0x38, ResultLength=0x0) [0255.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e500, Length=0x28, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e500, Length=0x28, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e500, Length=0x28, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e570, Length=0x28, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6d0, Length=0x38, ResultLength=0x0) [0255.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.589] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5f0, Length=0x28, ResultLength=0x0) [0255.593] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5f0, Length=0x28, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e490, Length=0x20, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e410, Length=0x20, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e410, Length=0x20, ResultLength=0x0) [0255.594] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e410, Length=0x20, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6d0, Length=0x38, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.595] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6d0, Length=0x38, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e550, Length=0x20, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4e0, Length=0x20, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4e0, Length=0x20, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.596] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x50, ResultLength=0x0) [0255.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e720, Length=0x28, ResultLength=0x0) [0255.597] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x50, ResultLength=0x0) [0255.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.597] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x50, ResultLength=0x0) [0255.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7a0, Length=0x50, ResultLength=0x0) [0255.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.598] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6d0, Length=0x38, ResultLength=0x0) [0255.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e500, Length=0x28, ResultLength=0x0) [0255.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.633] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e500, Length=0x28, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e500, Length=0x28, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e570, Length=0x28, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.634] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6d0, Length=0x38, ResultLength=0x0) [0255.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.635] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5f0, Length=0x28, ResultLength=0x0) [0255.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.640] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5f0, Length=0x28, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e490, Length=0x20, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e410, Length=0x20, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e410, Length=0x20, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e410, Length=0x20, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.641] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6d0, Length=0x38, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6d0, Length=0x38, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e550, Length=0x20, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4e0, Length=0x20, ResultLength=0x0) [0255.642] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e4e0, Length=0x20, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.643] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.644] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x28, ResultLength=0x0) [0255.646] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.646] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.647] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.652] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x28, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.653] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0255.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.655] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x20, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.656] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x20, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x20, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x20, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.657] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x28, ResultLength=0x0) [0255.658] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.658] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.659] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.665] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.666] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x28, ResultLength=0x0) [0255.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.669] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x20, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x20, ResultLength=0x0) [0255.670] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x20, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x20, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x28, ResultLength=0x0) [0255.672] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.681] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.681] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x28, ResultLength=0x0) [0255.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.682] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0255.684] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x20, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x20, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x20, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x20, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x28, ResultLength=0x0) [0255.688] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.688] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebd0, Length=0x50, ResultLength=0x0) [0255.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.695] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e930, Length=0x28, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x28, ResultLength=0x0) [0255.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.697] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0255.698] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x20, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e900, Length=0x20, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x38, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x20, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x20, ResultLength=0x0) [0255.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e910, Length=0x20, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.723] GetProcessHeap () returned 0x298cddd0000 [0255.723] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05a050 [0255.723] GetProcessHeap () returned 0x298cddd0000 [0255.723] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa9070 [0255.723] GetProcessHeap () returned 0x298cddd0000 [0255.723] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x12c) returned 0x298cdecee90 [0255.723] GetProcessHeap () returned 0x298cddd0000 [0255.723] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x138) returned 0x298cdeca100 [0255.724] GetProcessHeap () returned 0x298cddd0000 [0255.724] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x140) returned 0x298cde75180 [0255.724] GetProcessHeap () returned 0x298cddd0000 [0255.724] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e91f0 [0255.724] GetProcessHeap () returned 0x298cddd0000 [0255.724] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x140) returned 0x298cea90e40 [0255.724] GetProcessHeap () returned 0x298cddd0000 [0255.724] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05b700 [0255.724] GetProcessHeap () returned 0x298cddd0000 [0255.724] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa9030 [0255.724] GetProcessHeap () returned 0x298cddd0000 [0255.724] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde75180 | out: hHeap=0x298cddd0000) returned 1 [0255.724] GetProcessHeap () returned 0x298cddd0000 [0255.724] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x1f4) returned 0x298cde68950 [0255.724] GetProcessHeap () returned 0x298cddd0000 [0255.724] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xf4) returned 0x298cea07f70 [0255.725] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807ed98 | out: phModule=0xb82807ed98*=0x7ffcea380000) returned 1 [0255.726] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0255.726] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807ef70, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807ef70, ResultLength=0x0) returned 0x0 [0255.727] GetProcessHeap () returned 0x298cddd0000 [0255.727] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e97b0 [0255.727] GetProcessHeap () returned 0x298cddd0000 [0255.727] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x40) returned 0x298cefdd890 [0255.727] GetProcessHeap () returned 0x298cddd0000 [0255.727] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05acb0 [0255.727] GetProcessHeap () returned 0x298cddd0000 [0255.727] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8ce0 [0255.727] GetProcessHeap () returned 0x298cddd0000 [0255.727] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x38) returned 0x298cf0e97f0 [0255.727] GetProcessHeap () returned 0x298cddd0000 [0255.727] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9bb0 [0255.727] GetProcessHeap () returned 0x298cddd0000 [0255.727] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdeca100 | out: hHeap=0x298cddd0000) returned 1 [0255.727] GetProcessHeap () returned 0x298cddd0000 [0255.727] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cea90e40 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05b700 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa9030 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e91f0 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde68950 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cea07f70 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdd890 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05acb0 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8ce0 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e97b0 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e97f0 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdecee90 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9bb0 | out: hHeap=0x298cddd0000) returned 1 [0255.728] GetProcessHeap () returned 0x298cddd0000 [0255.728] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05a050 | out: hHeap=0x298cddd0000) returned 1 [0255.729] GetProcessHeap () returned 0x298cddd0000 [0255.729] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa9070 | out: hHeap=0x298cddd0000) returned 1 [0255.729] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x298cefa9050 [0255.729] GetProcessHeap () returned 0x298cddd0000 [0255.729] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf059c30 [0255.729] GetProcessHeap () returned 0x298cddd0000 [0255.729] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8d00 [0255.729] GetProcessHeap () returned 0x298cddd0000 [0255.729] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x12c) returned 0x298cdecee90 [0255.729] GetProcessHeap () returned 0x298cddd0000 [0255.729] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x138) returned 0x298cdeca100 [0255.729] GetProcessHeap () returned 0x298cddd0000 [0255.729] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x140) returned 0x298cde75180 [0255.729] GetProcessHeap () returned 0x298cddd0000 [0255.729] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9370 [0255.730] GetProcessHeap () returned 0x298cddd0000 [0255.730] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x140) returned 0x298cea90e40 [0255.730] GetProcessHeap () returned 0x298cddd0000 [0255.730] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05ae10 [0255.730] GetProcessHeap () returned 0x298cddd0000 [0255.730] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8cb0 [0255.730] GetProcessHeap () returned 0x298cddd0000 [0255.730] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde75180 | out: hHeap=0x298cddd0000) returned 1 [0255.730] GetProcessHeap () returned 0x298cddd0000 [0255.730] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x1f4) returned 0x298cde68950 [0255.730] GetProcessHeap () returned 0x298cddd0000 [0255.730] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xfc) returned 0x298cde23140 [0255.730] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807ee78 | out: phModule=0xb82807ee78*=0x7ffcea380000) returned 1 [0255.731] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0255.731] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807efb0, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807efb0, ResultLength=0x0) returned 0x0 [0255.731] GetProcessHeap () returned 0x298cddd0000 [0255.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9bb0 [0255.731] GetProcessHeap () returned 0x298cddd0000 [0255.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x48) returned 0x298cefdccb0 [0255.731] GetProcessHeap () returned 0x298cddd0000 [0255.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf059ad0 [0255.731] GetProcessHeap () returned 0x298cddd0000 [0255.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8df0 [0255.731] GetProcessHeap () returned 0x298cddd0000 [0255.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x40) returned 0x298cefdda20 [0255.731] GetProcessHeap () returned 0x298cddd0000 [0255.731] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x34) returned 0x298cf0e9c30 [0255.731] GetProcessHeap () returned 0x298cddd0000 [0255.732] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdeca100 | out: hHeap=0x298cddd0000) returned 1 [0255.732] GetProcessHeap () returned 0x298cddd0000 [0255.732] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cea90e40 | out: hHeap=0x298cddd0000) returned 1 [0255.732] GetProcessHeap () returned 0x298cddd0000 [0255.732] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05ae10 | out: hHeap=0x298cddd0000) returned 1 [0255.732] GetProcessHeap () returned 0x298cddd0000 [0255.732] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8cb0 | out: hHeap=0x298cddd0000) returned 1 [0255.732] GetProcessHeap () returned 0x298cddd0000 [0255.732] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9370 | out: hHeap=0x298cddd0000) returned 1 [0255.732] GetProcessHeap () returned 0x298cddd0000 [0255.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde68950 | out: hHeap=0x298cddd0000) returned 1 [0255.734] GetProcessHeap () returned 0x298cddd0000 [0255.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde23140 | out: hHeap=0x298cddd0000) returned 1 [0255.734] GetProcessHeap () returned 0x298cddd0000 [0255.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdccb0 | out: hHeap=0x298cddd0000) returned 1 [0255.734] GetProcessHeap () returned 0x298cddd0000 [0255.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf059ad0 | out: hHeap=0x298cddd0000) returned 1 [0255.734] GetProcessHeap () returned 0x298cddd0000 [0255.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8df0 | out: hHeap=0x298cddd0000) returned 1 [0255.734] GetProcessHeap () returned 0x298cddd0000 [0255.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9bb0 | out: hHeap=0x298cddd0000) returned 1 [0255.734] GetProcessHeap () returned 0x298cddd0000 [0255.734] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdda20 | out: hHeap=0x298cddd0000) returned 1 [0255.734] GetProcessHeap () returned 0x298cddd0000 [0255.735] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdecee90 | out: hHeap=0x298cddd0000) returned 1 [0255.735] GetProcessHeap () returned 0x298cddd0000 [0255.735] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9c30 | out: hHeap=0x298cddd0000) returned 1 [0255.735] GetProcessHeap () returned 0x298cddd0000 [0255.735] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf059c30 | out: hHeap=0x298cddd0000) returned 1 [0255.735] GetProcessHeap () returned 0x298cddd0000 [0255.735] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8d00 | out: hHeap=0x298cddd0000) returned 1 [0255.735] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x50, ResultLength=0x0) [0255.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x50, ResultLength=0x0) [0255.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x50, ResultLength=0x0) [0255.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x50, ResultLength=0x0) [0255.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.736] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x50, ResultLength=0x0) [0255.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x50, ResultLength=0x0) [0255.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e980, Length=0x50, ResultLength=0x0) [0255.737] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.738] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x38, ResultLength=0x0) [0255.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6e0, Length=0x28, ResultLength=0x0) [0255.742] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6e0, Length=0x28, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6e0, Length=0x28, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6e0, Length=0x28, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.743] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x28, ResultLength=0x0) [0255.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.746] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x38, ResultLength=0x0) [0255.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.747] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7d0, Length=0x28, ResultLength=0x0) [0255.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.755] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7d0, Length=0x28, ResultLength=0x0) [0255.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e670, Length=0x20, ResultLength=0x0) [0255.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5f0, Length=0x20, ResultLength=0x0) [0255.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5f0, Length=0x20, ResultLength=0x0) [0255.756] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e5f0, Length=0x20, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x38, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x38, ResultLength=0x0) [0255.902] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e730, Length=0x20, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6c0, Length=0x20, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6c0, Length=0x20, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.903] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.906] GetProcessHeap () returned 0x298cddd0000 [0255.906] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05bc80 [0255.906] GetProcessHeap () returned 0x298cddd0000 [0255.906] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8db0 [0255.906] GetProcessHeap () returned 0x298cddd0000 [0255.906] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x11c) returned 0x298cdddb420 [0255.908] GetProcessHeap () returned 0x298cddd0000 [0255.908] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x128) returned 0x298cdddbed0 [0255.908] GetProcessHeap () returned 0x298cddd0000 [0255.908] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9ef0 [0255.908] GetProcessHeap () returned 0x298cddd0000 [0255.908] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x130) returned 0x298cdeca100 [0255.909] GetProcessHeap () returned 0x298cddd0000 [0255.909] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05a3c0 [0255.909] GetProcessHeap () returned 0x298cddd0000 [0255.909] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8dc0 [0255.909] GetProcessHeap () returned 0x298cddd0000 [0255.909] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdecee90 | out: hHeap=0x298cddd0000) returned 1 [0255.909] GetProcessHeap () returned 0x298cddd0000 [0255.909] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x1e4) returned 0x298ceac57c0 [0255.910] GetProcessHeap () returned 0x298cddd0000 [0255.910] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x104) returned 0x298cde24680 [0255.910] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807edc8 | out: phModule=0xb82807edc8*=0x7ffcea380000) returned 1 [0255.910] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0255.910] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807eef0, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807eef0, ResultLength=0x0) returned 0x0 [0255.911] GetProcessHeap () returned 0x298cddd0000 [0255.911] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e91f0 [0255.911] GetProcessHeap () returned 0x298cddd0000 [0255.911] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x50) returned 0x298cee53910 [0255.911] GetProcessHeap () returned 0x298cddd0000 [0255.911] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05bd30 [0255.911] GetProcessHeap () returned 0x298cddd0000 [0255.911] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8dd0 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x40) returned 0x298cefdcda0 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdddbed0 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdeca100 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05a3c0 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8dc0 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9ef0 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ceac57c0 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde24680 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cee53910 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05bd30 | out: hHeap=0x298cddd0000) returned 1 [0255.912] GetProcessHeap () returned 0x298cddd0000 [0255.912] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8dd0 | out: hHeap=0x298cddd0000) returned 1 [0255.913] GetProcessHeap () returned 0x298cddd0000 [0255.913] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e91f0 | out: hHeap=0x298cddd0000) returned 1 [0255.913] GetProcessHeap () returned 0x298cddd0000 [0255.913] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdd5c0 | out: hHeap=0x298cddd0000) returned 1 [0255.914] GetProcessHeap () returned 0x298cddd0000 [0255.914] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdddb420 | out: hHeap=0x298cddd0000) returned 1 [0255.914] GetProcessHeap () returned 0x298cddd0000 [0255.914] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdcda0 | out: hHeap=0x298cddd0000) returned 1 [0255.914] GetProcessHeap () returned 0x298cddd0000 [0255.914] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05bc80 | out: hHeap=0x298cddd0000) returned 1 [0255.914] GetProcessHeap () returned 0x298cddd0000 [0255.914] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8db0 | out: hHeap=0x298cddd0000) returned 1 [0255.914] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0255.915] GetProcessHeap () returned 0x298cddd0000 [0255.915] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05b4f0 [0255.915] GetProcessHeap () returned 0x298cddd0000 [0255.915] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8f90 [0255.915] GetProcessHeap () returned 0x298cddd0000 [0255.915] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x122) returned 0x298cddda710 [0256.098] GetProcessHeap () returned 0x298cddd0000 [0256.098] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x130) returned 0x298cdeca100 [0256.099] GetProcessHeap () returned 0x298cddd0000 [0256.099] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e94f0 [0256.099] GetProcessHeap () returned 0x298cddd0000 [0256.099] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x138) returned 0x298cde75180 [0256.099] GetProcessHeap () returned 0x298cddd0000 [0256.099] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05a3c0 [0256.099] GetProcessHeap () returned 0x298cddd0000 [0256.099] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa9060 [0256.099] GetProcessHeap () returned 0x298cddd0000 [0256.099] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdecee90 | out: hHeap=0x298cddd0000) returned 1 [0256.099] GetProcessHeap () returned 0x298cddd0000 [0256.099] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x1ec) returned 0x298cde68950 [0256.100] GetProcessHeap () returned 0x298cddd0000 [0256.100] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x2f4) returned 0x298cefb06a0 [0256.100] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807edc8 | out: phModule=0xb82807edc8*=0x7ffcea380000) returned 1 [0256.100] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0256.100] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807eef0, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807eef0, ResultLength=0x0) returned 0x0 [0256.103] GetProcessHeap () returned 0x298cddd0000 [0256.103] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9bb0 [0256.103] GetProcessHeap () returned 0x298cddd0000 [0256.103] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x80) returned 0x298cf034ca0 [0256.103] GetProcessHeap () returned 0x298cddd0000 [0256.103] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05b860 [0256.103] GetProcessHeap () returned 0x298cddd0000 [0256.103] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8cd0 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x6c) returned 0x298cf0251a0 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdeca100 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde75180 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05a3c0 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa9060 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e94f0 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde68950 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefb06a0 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf034ca0 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05b860 | out: hHeap=0x298cddd0000) returned 1 [0256.105] GetProcessHeap () returned 0x298cddd0000 [0256.105] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8cd0 | out: hHeap=0x298cddd0000) returned 1 [0256.106] GetProcessHeap () returned 0x298cddd0000 [0256.106] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9bb0 | out: hHeap=0x298cddd0000) returned 1 [0256.106] GetProcessHeap () returned 0x298cddd0000 [0256.106] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf025820 | out: hHeap=0x298cddd0000) returned 1 [0256.107] GetProcessHeap () returned 0x298cddd0000 [0256.107] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cddda710 | out: hHeap=0x298cddd0000) returned 1 [0256.107] GetProcessHeap () returned 0x298cddd0000 [0256.107] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0251a0 | out: hHeap=0x298cddd0000) returned 1 [0256.107] GetProcessHeap () returned 0x298cddd0000 [0256.107] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05b4f0 | out: hHeap=0x298cddd0000) returned 1 [0256.107] GetProcessHeap () returned 0x298cddd0000 [0256.107] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8f90 | out: hHeap=0x298cddd0000) returned 1 [0256.107] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.115] GetProcessHeap () returned 0x298cddd0000 [0256.115] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf059c30 [0256.115] GetProcessHeap () returned 0x298cddd0000 [0256.115] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8e70 [0256.116] GetProcessHeap () returned 0x298cddd0000 [0256.116] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xfe) returned 0x298cde23e00 [0256.118] GetProcessHeap () returned 0x298cddd0000 [0256.118] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x108) returned 0x298cde23470 [0256.119] GetProcessHeap () returned 0x298cddd0000 [0256.119] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9230 [0256.119] GetProcessHeap () returned 0x298cddd0000 [0256.119] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x110) returned 0x298cdeca100 [0256.119] GetProcessHeap () returned 0x298cddd0000 [0256.119] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05a3c0 [0256.119] GetProcessHeap () returned 0x298cddd0000 [0256.119] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8df0 [0256.119] GetProcessHeap () returned 0x298cddd0000 [0256.119] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ceb059f0 | out: hHeap=0x298cddd0000) returned 1 [0256.119] GetProcessHeap () returned 0x298cddd0000 [0256.120] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x1c4) returned 0x298ceac57c0 [0256.121] GetProcessHeap () returned 0x298cddd0000 [0256.121] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xfc) returned 0x298cde24ac0 [0256.121] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807ee48 | out: phModule=0xb82807ee48*=0x7ffcea380000) returned 1 [0256.121] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0256.121] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807ef70, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807ef70, ResultLength=0x0) returned 0x0 [0256.122] GetProcessHeap () returned 0x298cddd0000 [0256.122] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9f70 [0256.122] GetProcessHeap () returned 0x298cddd0000 [0256.122] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x48) returned 0x298cefdd5c0 [0256.123] GetProcessHeap () returned 0x298cddd0000 [0256.123] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05b390 [0256.123] GetProcessHeap () returned 0x298cddd0000 [0256.123] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8e40 [0256.124] GetProcessHeap () returned 0x298cddd0000 [0256.124] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x34) returned 0x298cf0e97b0 [0256.124] GetProcessHeap () returned 0x298cddd0000 [0256.124] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde23470 | out: hHeap=0x298cddd0000) returned 1 [0256.124] GetProcessHeap () returned 0x298cddd0000 [0256.124] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdeca100 | out: hHeap=0x298cddd0000) returned 1 [0256.124] GetProcessHeap () returned 0x298cddd0000 [0256.124] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05a3c0 | out: hHeap=0x298cddd0000) returned 1 [0256.124] GetProcessHeap () returned 0x298cddd0000 [0256.124] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8df0 | out: hHeap=0x298cddd0000) returned 1 [0256.125] GetProcessHeap () returned 0x298cddd0000 [0256.125] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9230 | out: hHeap=0x298cddd0000) returned 1 [0256.125] GetProcessHeap () returned 0x298cddd0000 [0256.125] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ceac57c0 | out: hHeap=0x298cddd0000) returned 1 [0256.125] GetProcessHeap () returned 0x298cddd0000 [0256.125] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde24ac0 | out: hHeap=0x298cddd0000) returned 1 [0256.125] GetProcessHeap () returned 0x298cddd0000 [0256.125] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdd5c0 | out: hHeap=0x298cddd0000) returned 1 [0256.125] GetProcessHeap () returned 0x298cddd0000 [0256.125] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05b390 | out: hHeap=0x298cddd0000) returned 1 [0256.125] GetProcessHeap () returned 0x298cddd0000 [0256.125] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8e40 | out: hHeap=0x298cddd0000) returned 1 [0256.125] GetProcessHeap () returned 0x298cddd0000 [0256.125] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9f70 | out: hHeap=0x298cddd0000) returned 1 [0256.125] GetProcessHeap () returned 0x298cddd0000 [0256.125] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdca30 | out: hHeap=0x298cddd0000) returned 1 [0256.126] GetProcessHeap () returned 0x298cddd0000 [0256.126] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde23e00 | out: hHeap=0x298cddd0000) returned 1 [0256.126] GetProcessHeap () returned 0x298cddd0000 [0256.126] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e97b0 | out: hHeap=0x298cddd0000) returned 1 [0256.126] GetProcessHeap () returned 0x298cddd0000 [0256.126] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf059c30 | out: hHeap=0x298cddd0000) returned 1 [0256.126] GetProcessHeap () returned 0x298cddd0000 [0256.126] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8e70 | out: hHeap=0x298cddd0000) returned 1 [0256.127] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.130] GetProcessHeap () returned 0x298cddd0000 [0256.130] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05bbd0 [0256.130] GetProcessHeap () returned 0x298cddd0000 [0256.130] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8dd0 [0256.131] GetProcessHeap () returned 0x298cddd0000 [0256.131] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xb8) returned 0x298cef53b60 [0256.131] GetProcessHeap () returned 0x298cddd0000 [0256.131] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xc0) returned 0x298cefad830 [0256.131] GetProcessHeap () returned 0x298cddd0000 [0256.131] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9830 [0256.131] GetProcessHeap () returned 0x298cddd0000 [0256.131] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xc8) returned 0x298cefad690 [0256.131] GetProcessHeap () returned 0x298cddd0000 [0256.131] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05ae10 [0256.131] GetProcessHeap () returned 0x298cddd0000 [0256.131] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8db0 [0256.132] GetProcessHeap () returned 0x298cddd0000 [0256.132] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefacf40 | out: hHeap=0x298cddd0000) returned 1 [0256.132] GetProcessHeap () returned 0x298cddd0000 [0256.132] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x17c) returned 0x298ceac57c0 [0256.133] GetProcessHeap () returned 0x298cddd0000 [0256.133] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xdc) returned 0x298cdde4960 [0256.133] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807ef70 | out: phModule=0xb82807ef70*=0x7ffcea380000) returned 1 [0256.133] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0256.133] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807f028, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807f028, ResultLength=0x0) returned 0x0 [0256.134] GetProcessHeap () returned 0x298cddd0000 [0256.134] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e91b0 [0256.134] GetProcessHeap () returned 0x298cddd0000 [0256.134] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x28) returned 0x298cf097e30 [0256.134] GetProcessHeap () returned 0x298cddd0000 [0256.134] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05af70 [0256.134] GetProcessHeap () returned 0x298cddd0000 [0256.134] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8dc0 [0256.135] GetProcessHeap () returned 0x298cddd0000 [0256.135] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x14) returned 0x298cf0b3720 [0256.135] GetProcessHeap () returned 0x298cddd0000 [0256.135] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefad830 | out: hHeap=0x298cddd0000) returned 1 [0256.135] GetProcessHeap () returned 0x298cddd0000 [0256.135] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefad690 | out: hHeap=0x298cddd0000) returned 1 [0256.135] GetProcessHeap () returned 0x298cddd0000 [0256.136] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05ae10 | out: hHeap=0x298cddd0000) returned 1 [0256.203] GetProcessHeap () returned 0x298cddd0000 [0256.203] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8db0 | out: hHeap=0x298cddd0000) returned 1 [0256.203] GetProcessHeap () returned 0x298cddd0000 [0256.203] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9830 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ceac57c0 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdde4960 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf097e30 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05af70 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8dc0 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e91b0 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf097dd0 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cef53b60 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0b3720 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05bbd0 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8dd0 | out: hHeap=0x298cddd0000) returned 1 [0256.204] GetProcessHeap () returned 0x298cddd0000 [0256.204] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf0596b0 [0256.205] GetProcessHeap () returned 0x298cddd0000 [0256.205] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa9070 [0256.205] GetProcessHeap () returned 0x298cddd0000 [0256.205] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xc638) returned 0x298cecdc600 [0256.207] GetProcessHeap () returned 0x298cddd0000 [0256.207] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xc640) returned 0x298cecb3080 [0256.211] GetProcessHeap () returned 0x298cddd0000 [0256.211] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9bb0 [0256.211] GetProcessHeap () returned 0x298cddd0000 [0256.211] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xc648) returned 0x298cea53db0 [0256.213] GetProcessHeap () returned 0x298cddd0000 [0256.213] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05a5d0 [0256.213] GetProcessHeap () returned 0x298cddd0000 [0256.213] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8e40 [0256.213] GetProcessHeap () returned 0x298cddd0000 [0256.213] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cecbf6d0 | out: hHeap=0x298cddd0000) returned 1 [0256.213] GetProcessHeap () returned 0x298cddd0000 [0256.213] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xc6fc) returned 0x298cecbf6d0 [0256.214] GetProcessHeap () returned 0x298cddd0000 [0256.214] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xcc) returned 0x298ceb7d2d0 [0256.214] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807eff0 | out: phModule=0xb82807eff0*=0x7ffcea380000) returned 1 [0256.214] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0256.214] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807f048, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807f048, ResultLength=0x0) returned 0x0 [0256.366] GetProcessHeap () returned 0x298cddd0000 [0256.366] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e97b0 [0256.367] GetProcessHeap () returned 0x298cddd0000 [0256.367] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x18) returned 0x298cf0b3ac0 [0256.367] GetProcessHeap () returned 0x298cddd0000 [0256.367] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf059ef0 [0256.367] GetProcessHeap () returned 0x298cddd0000 [0256.367] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8e50 [0256.367] GetProcessHeap () returned 0x298cddd0000 [0256.367] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8e80 [0256.367] GetProcessHeap () returned 0x298cddd0000 [0256.367] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cecb3080 | out: hHeap=0x298cddd0000) returned 1 [0256.367] GetProcessHeap () returned 0x298cddd0000 [0256.367] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cea53db0 | out: hHeap=0x298cddd0000) returned 1 [0256.367] GetProcessHeap () returned 0x298cddd0000 [0256.367] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05a5d0 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8e40 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9bb0 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cecbf6d0 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ceb7d2d0 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0b3ac0 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf059ef0 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8e50 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e97b0 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0b3880 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cecdc600 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8e80 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.368] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0596b0 | out: hHeap=0x298cddd0000) returned 1 [0256.368] GetProcessHeap () returned 0x298cddd0000 [0256.369] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa9070 | out: hHeap=0x298cddd0000) returned 1 [0256.369] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.369] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eab0, Length=0x50, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eab0, Length=0x50, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eab0, Length=0x50, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x50, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x50, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x50, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9a0, Length=0x50, ResultLength=0x0) [0256.371] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.371] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x38, ResultLength=0x0) [0256.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x28, ResultLength=0x0) [0256.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x28, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x28, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e700, Length=0x28, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e770, Length=0x28, ResultLength=0x0) [0256.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x38, ResultLength=0x0) [0256.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x28, ResultLength=0x0) [0256.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.378] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e7f0, Length=0x28, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e690, Length=0x20, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e610, Length=0x20, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.379] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x38, ResultLength=0x0) [0256.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x38, ResultLength=0x0) [0256.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e750, Length=0x20, ResultLength=0x0) [0256.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6e0, Length=0x20, ResultLength=0x0) [0256.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.380] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e6e0, Length=0x20, ResultLength=0x0) [0256.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.381] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec10, Length=0x50, ResultLength=0x0) [0256.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec10, Length=0x50, ResultLength=0x0) [0256.382] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec10, Length=0x50, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0256.383] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.384] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0256.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0256.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0256.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0256.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x28, ResultLength=0x0) [0256.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0256.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0256.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0256.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0256.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0256.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0256.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0256.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec10, Length=0x50, ResultLength=0x0) [0256.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec10, Length=0x50, ResultLength=0x0) [0256.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec10, Length=0x50, ResultLength=0x0) [0256.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0256.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0256.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0256.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x50, ResultLength=0x0) [0256.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0256.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0256.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0256.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e860, Length=0x28, ResultLength=0x0) [0256.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8d0, Length=0x28, ResultLength=0x0) [0256.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0256.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0256.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e950, Length=0x28, ResultLength=0x0) [0256.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e830, Length=0x20, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea30, Length=0x38, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e8b0, Length=0x20, ResultLength=0x0) [0256.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e840, Length=0x20, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x50, ResultLength=0x0) [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec40, Length=0x28, ResultLength=0x0) [0256.472] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x50, ResultLength=0x0) [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x50, ResultLength=0x0) [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x50, ResultLength=0x0) [0256.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf0, Length=0x38, ResultLength=0x0) [0256.477] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x28, ResultLength=0x0) [0256.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf0, Length=0x38, ResultLength=0x0) [0256.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x28, ResultLength=0x0) [0256.511] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x28, ResultLength=0x0) [0256.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf0, Length=0x38, ResultLength=0x0) [0256.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x20, ResultLength=0x0) [0256.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x20, ResultLength=0x0) [0256.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x20, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x20, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf0, Length=0x38, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x20, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea00, Length=0x20, ResultLength=0x0) [0256.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea00, Length=0x20, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x50, ResultLength=0x0) [0256.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec40, Length=0x28, ResultLength=0x0) [0256.515] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f\\4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x50, ResultLength=0x0) [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x50, ResultLength=0x0) [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x50, ResultLength=0x0) [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf0, Length=0x38, ResultLength=0x0) [0256.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0256.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0256.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea20, Length=0x28, ResultLength=0x0) [0256.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea90, Length=0x28, ResultLength=0x0) [0256.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf0, Length=0x38, ResultLength=0x0) [0256.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.523] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x28, ResultLength=0x0) [0256.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.526] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb10, Length=0x28, ResultLength=0x0) [0256.527] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf0, Length=0x38, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x20, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x20, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x20, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807e9f0, Length=0x20, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.528] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebf0, Length=0x38, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea70, Length=0x20, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea00, Length=0x20, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea00, Length=0x20, ResultLength=0x0) [0256.529] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.530] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.532] GetProcessHeap () returned 0x298cddd0000 [0256.532] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf059600 [0256.532] GetProcessHeap () returned 0x298cddd0000 [0256.532] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8d50 [0256.533] GetProcessHeap () returned 0x298cddd0000 [0256.533] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xfe) returned 0x298cde24ac0 [0256.535] GetProcessHeap () returned 0x298cddd0000 [0256.535] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x108) returned 0x298cde24570 [0256.535] GetProcessHeap () returned 0x298cddd0000 [0256.535] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e92b0 [0256.535] GetProcessHeap () returned 0x298cddd0000 [0256.535] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x110) returned 0x298cdeca100 [0256.535] GetProcessHeap () returned 0x298cddd0000 [0256.535] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf059ce0 [0256.535] GetProcessHeap () returned 0x298cddd0000 [0256.535] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8fd0 [0256.535] GetProcessHeap () returned 0x298cddd0000 [0256.535] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ceb059f0 | out: hHeap=0x298cddd0000) returned 1 [0256.536] GetProcessHeap () returned 0x298cddd0000 [0256.536] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x1c4) returned 0x298ceac57c0 [0256.536] GetProcessHeap () returned 0x298cddd0000 [0256.536] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xfc) returned 0x298cde24680 [0256.537] GetModuleHandleExW (in: dwFlags=0x1, lpModuleName="ntdll.dll", phModule=0xb82807ee48 | out: phModule=0xb82807ee48*=0x7ffcea380000) returned 1 [0256.537] GetProcAddress (hModule=0x7ffcea380000, lpProcName="NtQuerySystemInformation") returned 0x7ffcea425a50 [0256.537] NtQuerySystemInformation (in: SystemInformationClass=0x86, SystemInformation=0xb82807ef70, Length=0x20, ResultLength=0x0 | out: SystemInformation=0xb82807ef70, ResultLength=0x0) returned 0x0 [0256.538] GetProcessHeap () returned 0x298cddd0000 [0256.538] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x30) returned 0x298cf0e9bb0 [0256.538] GetProcessHeap () returned 0x298cddd0000 [0256.538] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x48) returned 0x298cefdcf80 [0256.538] GetProcessHeap () returned 0x298cddd0000 [0256.538] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0xa0) returned 0x298cf05b5a0 [0256.538] GetProcessHeap () returned 0x298cddd0000 [0256.538] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x8) returned 0x298cefa8df0 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x8, Size=0x34) returned 0x298cf0e97b0 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde24570 | out: hHeap=0x298cddd0000) returned 1 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cdeca100 | out: hHeap=0x298cddd0000) returned 1 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf059ce0 | out: hHeap=0x298cddd0000) returned 1 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8fd0 | out: hHeap=0x298cddd0000) returned 1 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e92b0 | out: hHeap=0x298cddd0000) returned 1 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298ceac57c0 | out: hHeap=0x298cddd0000) returned 1 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde24680 | out: hHeap=0x298cddd0000) returned 1 [0256.539] GetProcessHeap () returned 0x298cddd0000 [0256.539] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdcf80 | out: hHeap=0x298cddd0000) returned 1 [0256.540] GetProcessHeap () returned 0x298cddd0000 [0256.540] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf05b5a0 | out: hHeap=0x298cddd0000) returned 1 [0256.540] GetProcessHeap () returned 0x298cddd0000 [0256.540] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8df0 | out: hHeap=0x298cddd0000) returned 1 [0256.540] GetProcessHeap () returned 0x298cddd0000 [0256.540] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e9bb0 | out: hHeap=0x298cddd0000) returned 1 [0256.540] GetProcessHeap () returned 0x298cddd0000 [0256.540] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefdce40 | out: hHeap=0x298cddd0000) returned 1 [0256.541] GetProcessHeap () returned 0x298cddd0000 [0256.541] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cde24ac0 | out: hHeap=0x298cddd0000) returned 1 [0256.541] GetProcessHeap () returned 0x298cddd0000 [0256.541] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf0e97b0 | out: hHeap=0x298cddd0000) returned 1 [0256.541] GetProcessHeap () returned 0x298cddd0000 [0256.541] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cf059600 | out: hHeap=0x298cddd0000) returned 1 [0256.541] GetProcessHeap () returned 0x298cddd0000 [0256.541] HeapFree (in: hHeap=0x298cddd0000, dwFlags=0x0, lpMem=0x298cefa8d50 | out: hHeap=0x298cddd0000) returned 1 [0256.541] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807efe0, Length=0x20, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ee10, Length=0x50, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed90, Length=0x28, ResultLength=0x0) [0256.542] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ee10, Length=0x50, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.542] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ee10, Length=0x50, ResultLength=0x0) [0256.543] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.547] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ee10, Length=0x50, ResultLength=0x0) [0256.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.548] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x38, ResultLength=0x0) [0256.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb70, Length=0x28, ResultLength=0x0) [0256.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb70, Length=0x28, ResultLength=0x0) [0256.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb70, Length=0x28, ResultLength=0x0) [0256.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebe0, Length=0x28, ResultLength=0x0) [0256.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x38, ResultLength=0x0) [0256.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec60, Length=0x28, ResultLength=0x0) [0256.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ec60, Length=0x28, ResultLength=0x0) [0256.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb00, Length=0x20, ResultLength=0x0) [0256.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea80, Length=0x20, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea80, Length=0x20, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ea80, Length=0x20, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x38, ResultLength=0x0) [0256.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x38, ResultLength=0x0) [0256.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ebc0, Length=0x20, ResultLength=0x0) [0256.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x20, ResultLength=0x0) [0256.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eb50, Length=0x20, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef90, Length=0x50, ResultLength=0x0) [0256.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef10, Length=0x28, ResultLength=0x0) [0256.563] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0256.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef90, Length=0x50, ResultLength=0x0) [0256.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef90, Length=0x50, ResultLength=0x0) [0256.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef90, Length=0x50, ResultLength=0x0) [0256.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eec0, Length=0x38, ResultLength=0x0) [0256.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecf0, Length=0x28, ResultLength=0x0) [0256.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecf0, Length=0x28, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecf0, Length=0x28, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x28, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eec0, Length=0x38, ResultLength=0x0) [0256.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ede0, Length=0x28, ResultLength=0x0) [0256.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ede0, Length=0x28, ResultLength=0x0) [0256.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eec0, Length=0x38, ResultLength=0x0) [0256.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x20, ResultLength=0x0) [0256.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x20, ResultLength=0x0) [0256.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x20, ResultLength=0x0) [0256.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x20, ResultLength=0x0) [0256.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eec0, Length=0x38, ResultLength=0x0) [0256.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x20, ResultLength=0x0) [0256.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecd0, Length=0x20, ResultLength=0x0) [0256.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecd0, Length=0x20, ResultLength=0x0) [0256.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef90, Length=0x50, ResultLength=0x0) [0256.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef10, Length=0x28, ResultLength=0x0) [0256.576] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0256.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef90, Length=0x50, ResultLength=0x0) [0256.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef90, Length=0x50, ResultLength=0x0) [0256.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ef90, Length=0x50, ResultLength=0x0) [0256.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eec0, Length=0x38, ResultLength=0x0) [0256.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecf0, Length=0x28, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecf0, Length=0x28, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecf0, Length=0x28, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed60, Length=0x28, ResultLength=0x0) [0256.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eec0, Length=0x38, ResultLength=0x0) [0256.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ede0, Length=0x28, ResultLength=0x0) [0256.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.585] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ede0, Length=0x28, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eec0, Length=0x38, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x20, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x20, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x20, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecc0, Length=0x20, ResultLength=0x0) [0256.586] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807eec0, Length=0x38, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ed40, Length=0x20, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecd0, Length=0x20, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.587] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb82807ecd0, Length=0x20, ResultLength=0x0) [0256.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0256.588] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) Thread: id = 594 os_tid = 0x10c8 Thread: id = 608 os_tid = 0x134 [0253.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feff0, Length=0x50, ResultLength=0x0) [0253.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef70, Length=0x28, ResultLength=0x0) [0253.667] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feff0, Length=0x50, ResultLength=0x0) [0253.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.667] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feff0, Length=0x50, ResultLength=0x0) [0253.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feff0, Length=0x50, ResultLength=0x0) [0253.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.668] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x28, ResultLength=0x0) [0253.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x28, ResultLength=0x0) [0253.671] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x28, ResultLength=0x0) [0253.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fedc0, Length=0x28, ResultLength=0x0) [0253.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.672] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.673] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee40, Length=0x28, ResultLength=0x0) [0253.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.675] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee40, Length=0x28, ResultLength=0x0) [0253.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.676] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feda0, Length=0x20, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed20, Length=0x20, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed20, Length=0x20, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed20, Length=0x20, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.677] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feda0, Length=0x20, ResultLength=0x0) [0253.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.678] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.679] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.679] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.679] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.679] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.679] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.679] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feff0, Length=0x50, ResultLength=0x0) [0253.679] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef70, Length=0x28, ResultLength=0x0) [0253.679] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.680] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.680] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.680] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feff0, Length=0x50, ResultLength=0x0) [0253.680] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.680] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feff0, Length=0x50, ResultLength=0x0) [0253.680] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.680] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feff0, Length=0x50, ResultLength=0x0) [0253.681] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.681] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x28, ResultLength=0x0) [0253.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x28, ResultLength=0x0) [0253.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.685] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x28, ResultLength=0x0) [0253.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fedc0, Length=0x28, ResultLength=0x0) [0253.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.686] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.687] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee40, Length=0x28, ResultLength=0x0) [0253.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.689] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee40, Length=0x28, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feda0, Length=0x20, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed20, Length=0x20, ResultLength=0x0) [0253.690] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed20, Length=0x20, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed20, Length=0x20, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feda0, Length=0x20, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.691] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282ff040, Length=0x58, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fefb0, Length=0x28, ResultLength=0x0) [0253.692] _wcsicmp (_String1="SPPSVC\\55c92734-d682-4d71-983e-d6ec3f16059f", _String2="__##USERSEP##\\$$_RESERVED_$$\\NAMESPACE__") returned 20 [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282ff040, Length=0x58, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282ff040, Length=0x58, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.692] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282ff040, Length=0x58, ResultLength=0x0) [0253.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.693] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.696] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.699] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed60, Length=0x28, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed60, Length=0x28, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed60, Length=0x28, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.700] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fedd0, Length=0x28, ResultLength=0x0) [0253.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.701] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.702] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee50, Length=0x28, ResultLength=0x0) [0253.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.704] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee50, Length=0x28, ResultLength=0x0) [0253.705] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.706] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fecc0, Length=0x20, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec40, Length=0x20, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec40, Length=0x20, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec40, Length=0x20, ResultLength=0x0) [0253.707] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee90, Length=0x20, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fedb0, Length=0x20, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.708] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fedb0, Length=0x20, ResultLength=0x0) [0253.709] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x20, ResultLength=0x0) [0253.768] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef20, Length=0x38, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fedb0, Length=0x20, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed40, Length=0x20, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.769] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed40, Length=0x20, ResultLength=0x0) [0253.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282ff040, Length=0x58, ResultLength=0x0) [0253.770] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef80, Length=0x20, ResultLength=0x0) [0253.770] GetTickCount () returned 0x117fbd7 [0253.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee38, Length=0x58, ResultLength=0x0) [0253.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.771] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x38, ResultLength=0x0) [0253.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb80, Length=0x28, ResultLength=0x0) [0253.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.774] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb80, Length=0x28, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb80, Length=0x28, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb80, Length=0x28, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.775] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febf0, Length=0x28, ResultLength=0x0) [0253.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x38, ResultLength=0x0) [0253.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.776] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x28, ResultLength=0x0) [0253.781] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.781] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.781] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.781] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.781] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x28, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x38, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x20, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb50, Length=0x20, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb50, Length=0x20, ResultLength=0x0) [0253.782] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb50, Length=0x20, ResultLength=0x0) [0253.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed50, Length=0x38, ResultLength=0x0) [0253.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x20, ResultLength=0x0) [0253.783] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb60, Length=0x20, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb60, Length=0x20, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.784] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee38, Length=0x58, ResultLength=0x0) [0253.785] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.786] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed10, Length=0x38, ResultLength=0x0) [0253.789] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.790] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.794] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb50, Length=0x28, ResultLength=0x0) [0253.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.795] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb50, Length=0x28, ResultLength=0x0) [0253.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb50, Length=0x28, ResultLength=0x0) [0253.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.796] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb50, Length=0x28, ResultLength=0x0) [0253.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febc0, Length=0x28, ResultLength=0x0) [0253.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed10, Length=0x38, ResultLength=0x0) [0253.797] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed10, Length=0x38, ResultLength=0x0) [0253.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.798] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec40, Length=0x28, ResultLength=0x0) [0253.802] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.803] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec40, Length=0x28, ResultLength=0x0) [0253.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.855] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed10, Length=0x38, ResultLength=0x0) [0253.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed10, Length=0x38, ResultLength=0x0) [0253.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.856] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feab0, Length=0x20, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.857] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec80, Length=0x20, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed10, Length=0x38, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feba0, Length=0x20, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb20, Length=0x20, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb20, Length=0x20, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb20, Length=0x20, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.858] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed10, Length=0x38, ResultLength=0x0) [0253.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feba0, Length=0x20, ResultLength=0x0) [0253.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb20, Length=0x20, ResultLength=0x0) [0253.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb20, Length=0x20, ResultLength=0x0) [0253.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.859] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb20, Length=0x20, ResultLength=0x0) [0253.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.863] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed10, Length=0x38, ResultLength=0x0) [0253.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feba0, Length=0x20, ResultLength=0x0) [0253.864] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb30, Length=0x20, ResultLength=0x0) [0253.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb30, Length=0x20, ResultLength=0x0) [0253.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.865] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fee38, Length=0x58, ResultLength=0x0) [0253.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed00, Length=0x58, ResultLength=0x0) [0253.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.866] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.869] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feac0, Length=0x28, ResultLength=0x0) [0253.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.870] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb40, Length=0x28, ResultLength=0x0) [0253.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.873] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb40, Length=0x28, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaa0, Length=0x20, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x20, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x20, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x20, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.874] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaa0, Length=0x20, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.875] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed00, Length=0x58, ResultLength=0x0) [0253.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.876] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.879] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feac0, Length=0x28, ResultLength=0x0) [0253.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.880] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.881] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb40, Length=0x28, ResultLength=0x0) [0253.885] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.885] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.885] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.885] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb40, Length=0x28, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe9e0, Length=0x20, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe960, Length=0x20, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe960, Length=0x20, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe960, Length=0x20, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.886] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaa0, Length=0x20, ResultLength=0x0) [0253.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0253.887] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed00, Length=0x58, ResultLength=0x0) [0253.888] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.889] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.891] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.892] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea50, Length=0x28, ResultLength=0x0) [0253.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feac0, Length=0x28, ResultLength=0x0) [0253.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0253.893] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0253.894] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb40, Length=0x28, ResultLength=0x0) [0254.006] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.006] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb40, Length=0x28, ResultLength=0x0) [0254.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.007] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaa0, Length=0x20, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x20, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x20, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x20, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.008] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec20, Length=0x38, ResultLength=0x0) [0254.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaa0, Length=0x20, ResultLength=0x0) [0254.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0254.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea30, Length=0x20, ResultLength=0x0) [0254.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.009] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed00, Length=0x58, ResultLength=0x0) [0254.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.010] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x38, ResultLength=0x0) [0254.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.014] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.018] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x28, ResultLength=0x0) [0254.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.019] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x28, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x28, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x28, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea90, Length=0x28, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.020] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x38, ResultLength=0x0) [0254.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x38, ResultLength=0x0) [0254.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.021] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb10, Length=0x28, ResultLength=0x0) [0254.024] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb10, Length=0x28, ResultLength=0x0) [0254.025] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x38, ResultLength=0x0) [0254.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x38, ResultLength=0x0) [0254.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.026] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe980, Length=0x20, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe900, Length=0x20, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe900, Length=0x20, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe900, Length=0x20, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb50, Length=0x20, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.027] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x38, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea70, Length=0x20, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe9f0, Length=0x20, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe9f0, Length=0x20, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe9f0, Length=0x20, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.028] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x38, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea70, Length=0x20, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe9f0, Length=0x20, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe9f0, Length=0x20, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe9f0, Length=0x20, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x38, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea70, Length=0x20, ResultLength=0x0) [0254.029] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea00, Length=0x20, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea00, Length=0x20, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.030] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.031] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fef80, Length=0x20, ResultLength=0x0) [0254.032] GetTickCount () returned 0x117fce1 [0254.032] GetProcessHeap () returned 0x298cddd0000 [0254.032] RtlAllocateHeap (HeapHandle=0x298cddd0000, Flags=0x0, Size=0x18) returned 0x298cf0b2e00 [0254.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed30, Length=0x30, ResultLength=0x0) [0254.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.032] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febb0, Length=0x30, ResultLength=0x0) [0254.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb20, Length=0x38, ResultLength=0x0) [0254.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea80, Length=0x30, ResultLength=0x0) [0254.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.033] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb70, Length=0x30, ResultLength=0x0) [0254.034] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fead0, Length=0x20, ResultLength=0x0) [0254.035] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.035] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb70, Length=0x30, ResultLength=0x0) [0254.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feab0, Length=0x30, ResultLength=0x0) [0254.037] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.040] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.143] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.144] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.145] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.146] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.147] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.148] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.149] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.150] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.151] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.152] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.153] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.154] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.244] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb60, Length=0x30, ResultLength=0x0) [0254.244] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea20, Length=0x18, ResultLength=0x0) [0254.244] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.245] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.247] RegFlushKey (hKey=0x334) returned 0x0 [0254.281] NtLockProductActivationKeys (pPrivateVer=0x0, pSafeMode=0x0) returned 0x0 [0254.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec30, Length=0x38, ResultLength=0x0) [0254.285] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb70, Length=0x30, ResultLength=0x0) [0254.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fead0, Length=0x20, ResultLength=0x0) [0254.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.286] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb70, Length=0x30, ResultLength=0x0) [0254.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feab0, Length=0x30, ResultLength=0x0) [0254.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.288] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feea0, Length=0x28, ResultLength=0x0) [0254.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.289] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feea0, Length=0x28, ResultLength=0x0) [0254.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fed80, Length=0x58, ResultLength=0x0) [0254.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.290] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x38, ResultLength=0x0) [0254.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.293] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.297] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feab0, Length=0x28, ResultLength=0x0) [0254.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feab0, Length=0x28, ResultLength=0x0) [0254.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.299] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feab0, Length=0x28, ResultLength=0x0) [0254.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feab0, Length=0x28, ResultLength=0x0) [0254.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb20, Length=0x28, ResultLength=0x0) [0254.300] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x38, ResultLength=0x0) [0254.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x38, ResultLength=0x0) [0254.301] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.302] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feba0, Length=0x28, ResultLength=0x0) [0254.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feba0, Length=0x28, ResultLength=0x0) [0254.306] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x38, ResultLength=0x0) [0254.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x38, ResultLength=0x0) [0254.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.307] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea10, Length=0x20, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe990, Length=0x20, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe990, Length=0x20, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fe990, Length=0x20, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.308] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febe0, Length=0x20, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x38, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb00, Length=0x20, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea80, Length=0x20, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea80, Length=0x20, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea80, Length=0x20, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.309] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x38, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb00, Length=0x20, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea80, Length=0x20, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea80, Length=0x20, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea80, Length=0x20, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.310] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fec70, Length=0x38, ResultLength=0x0) [0254.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feb00, Length=0x20, ResultLength=0x0) [0254.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea90, Length=0x20, ResultLength=0x0) [0254.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.311] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fea90, Length=0x20, ResultLength=0x0) [0254.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.312] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fecb0, Length=0x40, ResultLength=0x0) [0254.313] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.314] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.315] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.316] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.317] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.318] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.321] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.322] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.323] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.324] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.325] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.326] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.327] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.328] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.329] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.330] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.331] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.332] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.333] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.334] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.334] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.334] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.334] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.335] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.335] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.335] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.335] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.336] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.337] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.338] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.339] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.340] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.341] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.342] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.343] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.344] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.345] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.346] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.347] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.348] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.349] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.349] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.349] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.349] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.350] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.351] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.352] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.353] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.354] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.355] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.356] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.357] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.358] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.359] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.360] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.361] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.362] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.363] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.363] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.363] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.363] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.364] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.364] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.364] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.364] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.365] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.365] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.365] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.365] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.366] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.366] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.366] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.366] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fecb0, Length=0x40, ResultLength=0x0) [0254.366] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.367] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fecb0, Length=0x40, ResultLength=0x0) [0254.367] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.367] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.368] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.368] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.368] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.368] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.369] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.369] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.369] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.369] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.369] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.370] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.371] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.371] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.371] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.371] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.372] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.373] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.374] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.375] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.376] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.439] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.440] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.441] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.442] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.443] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.444] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.445] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.446] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.447] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.448] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.448] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.448] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.448] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.449] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.450] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.451] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.452] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.452] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.452] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.453] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.454] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.455] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.456] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.457] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.458] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.459] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.460] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.461] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.462] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.462] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.462] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.463] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.464] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.465] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.466] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.467] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.468] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.469] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.470] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.471] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.472] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282febd0, Length=0x38, ResultLength=0x0) [0254.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.473] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.474] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.475] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.478] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.479] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.480] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282feaf0, Length=0x38, ResultLength=0x0) [0254.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.481] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.482] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0xb8282fecb0, Length=0x40, ResultLength=0x0) [0254.512] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.513] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.514] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.515] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.516] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.517] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.518] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.519] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.520] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.521] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.522] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.550] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.551] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.552] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.553] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.554] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.555] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.556] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.557] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.558] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.559] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.560] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.561] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.562] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.563] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.564] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.565] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.566] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.567] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.568] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.569] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.570] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.571] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.572] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.573] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.574] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.575] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.576] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.577] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.578] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.579] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.580] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.581] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.582] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0) [0254.583] NtQuerySystemInformation (SystemInformationClass=0xb9, SystemInformation=0x0, Length=0x0, ResultLength=0x0)